citadel/msgbase.c

   1 /*
   2  * Implements the message store.
   3  *
   4  * Copyright (c) 1987-2012 by the citadel.org team
   5  *
   6  * This program is open source software; you can redistribute it and/or modify
   7  * it under the terms of the GNU General Public License version 3.
   8  *
   9  * This program is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  * GNU General Public License for more details.
  13  */
  14
  15 #include "sysdep.h"
  16 #include <stdlib.h>
  17 #include <unistd.h>
  18 #include <stdio.h>
  19 #include <fcntl.h>
  20
  21 #if TIME_WITH_SYS_TIME
  22 # include <sys/time.h>
  23 # include <time.h>
  24 #else
  25 # if HAVE_SYS_TIME_H
  26 #  include <sys/time.h>
  27 # else
  28 #  include <time.h>
  29 # endif
  30 #endif
  31
  32
  33 #include <ctype.h>
  34 #include <string.h>
  35 #include <limits.h>
  36 #include <errno.h>
  37 #include <stdarg.h>
  38 #include <sys/stat.h>
  39 #include <sys/types.h>
  40 #include <regex.h>
  41 #include <libcitadel.h>
  42 #include "citadel.h"
  43 #include "server.h"
  44 #include "serv_extensions.h"
  45 #include "database.h"
  46 #include "msgbase.h"
  47 #include "support.h"
  48 #include "sysdep_decls.h"
  49 #include "citserver.h"
  50 #include "room_ops.h"
  51 #include "user_ops.h"
  52 #include "file_ops.h"
  53 #include "config.h"
  54 #include "control.h"
  55 #include "genstamp.h"
  56 #include "internet_addressing.h"
  57 #include "euidindex.h"
  58 #include "journaling.h"
  59 #include "citadel_dirs.h"
  60 #include "clientsocket.h"
  61 #include "threads.h"
  62
  63 #include "ctdl_module.h"
  64
  65 long config_msgnum;
  66 struct addresses_to_be_filed *atbf = NULL;
  67
  68 /* This temp file holds the queue of operations for AdjRefCount() */
  69 static FILE *arcfp = NULL;
  70
  71 /*
  72  * These are the four-character field headers we use when outputting
  73  * messages in Citadel format (as opposed to RFC822 format).
  74  */
  75 char *msgkeys[] = {
  76         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  77         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  78         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  79         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  80         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  81         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  82         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  83         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  84         NULL,
  85         "from",
  86         NULL, NULL, NULL,
  87         "exti",
  88         "rfca",
  89         NULL,
  90         "hnod",
  91         "msgn",
  92         "jrnl",
  93         NULL,
  94         "list",
  95         "text",
  96         "node",
  97         "room",
  98         "path",
  99         NULL,
 100         "rcpt",
 101         "spec",
 102         "time",
 103         "subj",
 104         NULL,
 105         "wefw",
 106         NULL,
 107         "cccc",
 108         NULL
 109 };
 110
 111 /*
 112  * This function is self explanatory.
 113  * (What can I say, I'm in a weird mood today...)
 114  */
 115 void remove_any_whitespace_to_the_left_or_right_of_at_symbol(char *name)
 116 {
 117         int i;
 118
 119         for (i = 0; i < strlen(name); ++i) {
 120                 if (name[i] == '@') {
 121                         while (isspace(name[i - 1]) && i > 0) {
 122                                 strcpy(&name[i - 1], &name[i]);
 123                                 --i;
 124                         }
 125                         while (isspace(name[i + 1])) {
 126                                 strcpy(&name[i + 1], &name[i + 2]);
 127                         }
 128                 }
 129         }
 130 }
 131
 132
 133 /*
 134  * Aliasing for network mail.
 135  * (Error messages have been commented out, because this is a server.)
 136  */
 137 int alias(char *name)
 138 {                               /* process alias and routing info for mail */
 139         FILE *fp;
 140         int a, i;
 141         char aaa[SIZ], bbb[SIZ];
 142         char *ignetcfg = NULL;
 143         char *ignetmap = NULL;
 144         int at = 0;
 145         char node[64];
 146         char testnode[64];
 147         char buf[SIZ];
 148
 149         char original_name[256];
 150         safestrncpy(original_name, name, sizeof original_name);
 151
 152         striplt(name);
 153         remove_any_whitespace_to_the_left_or_right_of_at_symbol(name);
 154         stripallbut(name, '<', '>');
 155
 156         fp = fopen(file_mail_aliases, "r");
 157         if (fp == NULL) {
 158                 fp = fopen("/dev/null", "r");
 159         }
 160         if (fp == NULL) {
 161                 return (MES_ERROR);
 162         }
 163         strcpy(aaa, "");
 164         strcpy(bbb, "");
 165         while (fgets(aaa, sizeof aaa, fp) != NULL) {
 166                 while (isspace(name[0]))
 167                         strcpy(name, &name[1]);
 168                 aaa[strlen(aaa) - 1] = 0;
 169                 strcpy(bbb, "");
 170                 for (a = 0; a < strlen(aaa); ++a) {
 171                         if (aaa[a] == ',') {
 172                                 strcpy(bbb, &aaa[a + 1]);
 173                                 aaa[a] = 0;
 174                         }
 175                 }
 176                 if (!strcasecmp(name, aaa))
 177                         strcpy(name, bbb);
 178         }
 179         fclose(fp);
 180
 181         /* Hit the Global Address Book */
 182         if (CtdlDirectoryLookup(aaa, name, sizeof aaa) == 0) {
 183                 strcpy(name, aaa);
 184         }
 185
 186         if (strcasecmp(original_name, name)) {
 187                 syslog(LOG_INFO, "%s is being forwarded to %s\n", original_name, name);
 188         }
 189
 190         /* Change "user @ xxx" to "user" if xxx is an alias for this host */
 191         for (a=0; a<strlen(name); ++a) {
 192                 if (name[a] == '@') {
 193                         if (CtdlHostAlias(&name[a+1]) == hostalias_localhost) {
 194                                 name[a] = 0;
 195                                 syslog(LOG_INFO, "Changed to <%s>\n", name);
 196                         }
 197                 }
 198         }
 199
 200         /* determine local or remote type, see citadel.h */
 201         at = haschar(name, '@');
 202         if (at == 0) return(MES_LOCAL);         /* no @'s - local address */
 203         if (at > 1) return(MES_ERROR);          /* >1 @'s - invalid address */
 204         remove_any_whitespace_to_the_left_or_right_of_at_symbol(name);
 205
 206         /* figure out the delivery mode */
 207         extract_token(node, name, 1, '@', sizeof node);
 208
 209         /* If there are one or more dots in the nodename, we assume that it
 210          * is an FQDN and will attempt SMTP delivery to the Internet.
 211          */
 212         if (haschar(node, '.') > 0) {
 213                 return(MES_INTERNET);
 214         }
 215
 216         /* Otherwise we look in the IGnet maps for a valid Citadel node.
 217          * Try directly-connected nodes first...
 218          */
 219         ignetcfg = CtdlGetSysConfig(IGNETCFG);
 220         for (i=0; i<num_tokens(ignetcfg, '\n'); ++i) {
 221                 extract_token(buf, ignetcfg, i, '\n', sizeof buf);
 222                 extract_token(testnode, buf, 0, '|', sizeof testnode);
 223                 if (!strcasecmp(node, testnode)) {
 224                         free(ignetcfg);
 225                         return(MES_IGNET);
 226                 }
 227         }
 228         free(ignetcfg);
 229
 230         /*
 231          * Then try nodes that are two or more hops away.
 232          */
 233         ignetmap = CtdlGetSysConfig(IGNETMAP);
 234         for (i=0; i<num_tokens(ignetmap, '\n'); ++i) {
 235                 extract_token(buf, ignetmap, i, '\n', sizeof buf);
 236                 extract_token(testnode, buf, 0, '|', sizeof testnode);
 237                 if (!strcasecmp(node, testnode)) {
 238                         free(ignetmap);
 239                         return(MES_IGNET);
 240                 }
 241         }
 242         free(ignetmap);
 243
 244         /* If we get to this point it's an invalid node name */
 245         return (MES_ERROR);
 246 }
 247
 248
 249 /*
 250  * Back end for the MSGS command: output message number only.
 251  */
 252 void simple_listing(long msgnum, void *userdata)
 253 {
 254         cprintf("%ld\n", msgnum);
 255 }
 256
 257
 258
 259 /*
 260  * Back end for the MSGS command: output header summary.
 261  */
 262 void headers_listing(long msgnum, void *userdata)
 263 {
 264         struct CtdlMessage *msg;
 265
 266         msg = CtdlFetchMessage(msgnum, 0);
 267         if (msg == NULL) {
 268                 cprintf("%ld|0|||||\n", msgnum);
 269                 return;
 270         }
 271
 272         cprintf("%ld|%s|%s|%s|%s|%s|\n",
 273                 msgnum,
 274                 (msg->cm_fields['T'] ? msg->cm_fields['T'] : "0"),
 275                 (msg->cm_fields['A'] ? msg->cm_fields['A'] : ""),
 276                 (msg->cm_fields['N'] ? msg->cm_fields['N'] : ""),
 277                 (msg->cm_fields['F'] ? msg->cm_fields['F'] : ""),
 278                 (msg->cm_fields['U'] ? msg->cm_fields['U'] : "")
 279         );
 280         CtdlFreeMessage(msg);
 281 }
 282
 283 /*
 284  * Back end for the MSGS command: output EUID header.
 285  */
 286 void headers_euid(long msgnum, void *userdata)
 287 {
 288         struct CtdlMessage *msg;
 289
 290         msg = CtdlFetchMessage(msgnum, 0);
 291         if (msg == NULL) {
 292                 cprintf("%ld||\n", msgnum);
 293                 return;
 294         }
 295
 296         cprintf("%ld|%s|%s\n",
 297                 msgnum,
 298                 (msg->cm_fields['E'] ? msg->cm_fields['E'] : ""),
 299                 (msg->cm_fields['T'] ? msg->cm_fields['T'] : "0"));
 300         CtdlFreeMessage(msg);
 301 }
 302
 303
 304
 305
 306
 307 /* Determine if a given message matches the fields in a message template.
 308  * Return 0 for a successful match.
 309  */
 310 int CtdlMsgCmp(struct CtdlMessage *msg, struct CtdlMessage *template) {
 311         int i;
 312
 313         /* If there aren't any fields in the template, all messages will
 314          * match.
 315          */
 316         if (template == NULL) return(0);
 317
 318         /* Null messages are bogus. */
 319         if (msg == NULL) return(1);
 320
 321         for (i='A'; i<='Z'; ++i) {
 322                 if (template->cm_fields[i] != NULL) {
 323                         if (msg->cm_fields[i] == NULL) {
 324                                 /* Considered equal if temmplate is empty string */
 325                                 if (IsEmptyStr(template->cm_fields[i])) continue;
 326                                 return 1;
 327                         }
 328                         if (strcasecmp(msg->cm_fields[i],
 329                                 template->cm_fields[i])) return 1;
 330                 }
 331         }
 332
 333         /* All compares succeeded: we have a match! */
 334         return 0;
 335 }
 336
 337
 338
 339 /*
 340  * Retrieve the "seen" message list for the current room.
 341  */
 342 void CtdlGetSeen(char *buf, int which_set) {
 343         visit vbuf;
 344
 345         /* Learn about the user and room in question */
 346         CtdlGetRelationship(&vbuf, &CC->user, &CC->room);
 347
 348         if (which_set == ctdlsetseen_seen)
 349                 safestrncpy(buf, vbuf.v_seen, SIZ);
 350         if (which_set == ctdlsetseen_answered)
 351                 safestrncpy(buf, vbuf.v_answered, SIZ);
 352 }
 353
 354
 355
 356 /*
 357  * Manipulate the "seen msgs" string (or other message set strings)
 358  */
 359 void CtdlSetSeen(long *target_msgnums, int num_target_msgnums,
 360                 int target_setting, int which_set,
 361                 struct ctdluser *which_user, struct ctdlroom *which_room) {
 362         struct cdbdata *cdbfr;
 363         int i, k;
 364         int is_seen = 0;
 365         int was_seen = 0;
 366         long lo = (-1L);
 367         long hi = (-1L);
 368         visit vbuf;
 369         long *msglist;
 370         int num_msgs = 0;
 371         StrBuf *vset;
 372         StrBuf *setstr;
 373         StrBuf *lostr;
 374         StrBuf *histr;
 375         const char *pvset;
 376         char *is_set;   /* actually an array of booleans */
 377
 378         /* Don't bother doing *anything* if we were passed a list of zero messages */
 379         if (num_target_msgnums < 1) {
 380                 return;
 381         }
 382
 383         /* If no room was specified, we go with the current room. */
 384         if (!which_room) {
 385                 which_room = &CC->room;
 386         }
 387
 388         /* If no user was specified, we go with the current user. */
 389         if (!which_user) {
 390                 which_user = &CC->user;
 391         }
 392
 393         syslog(LOG_DEBUG, "CtdlSetSeen(%d msgs starting with %ld, %s, %d) in <%s>\n",
 394                 num_target_msgnums, target_msgnums[0],
 395                 (target_setting ? "SET" : "CLEAR"),
 396                 which_set,
 397                 which_room->QRname);
 398
 399         /* Learn about the user and room in question */
 400         CtdlGetRelationship(&vbuf, which_user, which_room);
 401
 402         /* Load the message list */
 403         cdbfr = cdb_fetch(CDB_MSGLISTS, &which_room->QRnumber, sizeof(long));
 404         if (cdbfr != NULL) {
 405                 msglist = (long *) cdbfr->ptr;
 406                 cdbfr->ptr = NULL;      /* CtdlSetSeen() now owns this memory */
 407                 num_msgs = cdbfr->len / sizeof(long);
 408                 cdb_free(cdbfr);
 409         } else {
 410                 return; /* No messages at all?  No further action. */
 411         }
 412
 413         is_set = malloc(num_msgs * sizeof(char));
 414         memset(is_set, 0, (num_msgs * sizeof(char)) );
 415
 416         /* Decide which message set we're manipulating */
 417         switch(which_set) {
 418         case ctdlsetseen_seen:
 419                 vset = NewStrBufPlain(vbuf.v_seen, -1);
 420                 break;
 421         case ctdlsetseen_answered:
 422                 vset = NewStrBufPlain(vbuf.v_answered, -1);
 423                 break;
 424         default:
 425                 vset = NewStrBuf();
 426         }
 427
 428
 429 #if 0   /* This is a special diagnostic section.  Do not allow it to run during normal operation. */
 430         syslog(LOG_DEBUG, "There are %d messages in the room.\n", num_msgs);
 431         for (i=0; i<num_msgs; ++i) {
 432                 if ((i > 0) && (msglist[i] <= msglist[i-1])) abort();
 433         }
 434         syslog(LOG_DEBUG, "We are twiddling %d of them.\n", num_target_msgnums);
 435         for (k=0; k<num_target_msgnums; ++k) {
 436                 if ((k > 0) && (target_msgnums[k] <= target_msgnums[k-1])) abort();
 437         }
 438 #endif
 439
 440         syslog(LOG_DEBUG, "before update: %s\n", ChrPtr(vset));
 441
 442         /* Translate the existing sequence set into an array of booleans */
 443         setstr = NewStrBuf();
 444         lostr = NewStrBuf();
 445         histr = NewStrBuf();
 446         pvset = NULL;
 447         while (StrBufExtract_NextToken(setstr, vset, &pvset, ',') >= 0) {
 448
 449                 StrBufExtract_token(lostr, setstr, 0, ':');
 450                 if (StrBufNum_tokens(setstr, ':') >= 2) {
 451                         StrBufExtract_token(histr, setstr, 1, ':');
 452                 }
 453                 else {
 454                         FlushStrBuf(histr);
 455                         StrBufAppendBuf(histr, lostr, 0);
 456                 }
 457                 lo = StrTol(lostr);
 458                 if (!strcmp(ChrPtr(histr), "*")) {
 459                         hi = LONG_MAX;
 460                 }
 461                 else {
 462                         hi = StrTol(histr);
 463                 }
 464
 465                 for (i = 0; i < num_msgs; ++i) {
 466                         if ((msglist[i] >= lo) && (msglist[i] <= hi)) {
 467                                 is_set[i] = 1;
 468                         }
 469                 }
 470         }
 471         FreeStrBuf(&setstr);
 472         FreeStrBuf(&lostr);
 473         FreeStrBuf(&histr);
 474
 475
 476         /* Now translate the array of booleans back into a sequence set */
 477         FlushStrBuf(vset);
 478         was_seen = 0;
 479         lo = (-1);
 480         hi = (-1);
 481
 482         for (i=0; i<num_msgs; ++i) {
 483                 is_seen = is_set[i];
 484
 485                 /* Apply changes */
 486                 for (k=0; k<num_target_msgnums; ++k) {
 487                         if (msglist[i] == target_msgnums[k]) {
 488                                 is_seen = target_setting;
 489                         }
 490                 }
 491
 492                 if ((was_seen == 0) && (is_seen == 1)) {
 493                         lo = msglist[i];
 494                 }
 495                 else if ((was_seen == 1) && (is_seen == 0)) {
 496                         hi = msglist[i-1];
 497
 498                         if (StrLength(vset) > 0) {
 499                                 StrBufAppendBufPlain(vset, HKEY(","), 0);
 500                         }
 501                         if (lo == hi) {
 502                                 StrBufAppendPrintf(vset, "%ld", hi);
 503                         }
 504                         else {
 505                                 StrBufAppendPrintf(vset, "%ld:%ld", lo, hi);
 506                         }
 507                 }
 508
 509                 if ((is_seen) && (i == num_msgs - 1)) {
 510                         if (StrLength(vset) > 0) {
 511                                 StrBufAppendBufPlain(vset, HKEY(","), 0);
 512                         }
 513                         if ((i==0) || (was_seen == 0)) {
 514                                 StrBufAppendPrintf(vset, "%ld", msglist[i]);
 515                         }
 516                         else {
 517                                 StrBufAppendPrintf(vset, "%ld:%ld", lo, msglist[i]);
 518                         }
 519                 }
 520
 521                 was_seen = is_seen;
 522         }
 523
 524         /*
 525          * We will have to stuff this string back into a 4096 byte buffer, so if it's
 526          * larger than that now, truncate it by removing tokens from the beginning.
 527          * The limit of 100 iterations is there to prevent an infinite loop in case
 528          * something unexpected happens.
 529          */
 530         int number_of_truncations = 0;
 531         while ( (StrLength(vset) > SIZ) && (number_of_truncations < 100) ) {
 532                 StrBufRemove_token(vset, 0, ',');
 533                 ++number_of_truncations;
 534         }
 535
 536         /*
 537          * If we're truncating the sequence set of messages marked with the 'seen' flag,
 538          * we want the earliest messages (the truncated ones) to be marked, not unmarked.
 539          * Otherwise messages at the beginning will suddenly appear to be 'unseen'.
 540          */
 541         if ( (which_set == ctdlsetseen_seen) && (number_of_truncations > 0) ) {
 542                 StrBuf *first_tok;
 543                 first_tok = NewStrBuf();
 544                 StrBufExtract_token(first_tok, vset, 0, ',');
 545                 StrBufRemove_token(vset, 0, ',');
 546
 547                 if (StrBufNum_tokens(first_tok, ':') > 1) {
 548                         StrBufRemove_token(first_tok, 0, ':');
 549                 }
 550
 551                 StrBuf *new_set;
 552                 new_set = NewStrBuf();
 553                 StrBufAppendBufPlain(new_set, HKEY("1:"), 0);
 554                 StrBufAppendBuf(new_set, first_tok, 0);
 555                 StrBufAppendBufPlain(new_set, HKEY(":"), 0);
 556                 StrBufAppendBuf(new_set, vset, 0);
 557
 558                 FreeStrBuf(&vset);
 559                 FreeStrBuf(&first_tok);
 560                 vset = new_set;
 561         }
 562
 563         syslog(LOG_DEBUG, " after update: %s\n", ChrPtr(vset));
 564
 565         /* Decide which message set we're manipulating */
 566         switch (which_set) {
 567                 case ctdlsetseen_seen:
 568                         safestrncpy(vbuf.v_seen, ChrPtr(vset), sizeof vbuf.v_seen);
 569                         break;
 570                 case ctdlsetseen_answered:
 571                         safestrncpy(vbuf.v_answered, ChrPtr(vset), sizeof vbuf.v_answered);
 572                         break;
 573         }
 574
 575         free(is_set);
 576         free(msglist);
 577         CtdlSetRelationship(&vbuf, which_user, which_room);
 578         FreeStrBuf(&vset);
 579 }
 580
 581
 582 /*
 583  * API function to perform an operation for each qualifying message in the
 584  * current room.  (Returns the number of messages processed.)
 585  */
 586 int CtdlForEachMessage(int mode, long ref, char *search_string,
 587                         char *content_type,
 588                         struct CtdlMessage *compare,
 589                         ForEachMsgCallback CallBack,
 590                         void *userdata)
 591 {
 592
 593         int a, i, j;
 594         visit vbuf;
 595         struct cdbdata *cdbfr;
 596         long *msglist = NULL;
 597         int num_msgs = 0;
 598         int num_processed = 0;
 599         long thismsg;
 600         struct MetaData smi;
 601         struct CtdlMessage *msg = NULL;
 602         int is_seen = 0;
 603         long lastold = 0L;
 604         int printed_lastold = 0;
 605         int num_search_msgs = 0;
 606         long *search_msgs = NULL;
 607         regex_t re;
 608         int need_to_free_re = 0;
 609         regmatch_t pm;
 610
 611         if ((content_type) && (!IsEmptyStr(content_type))) {
 612                 regcomp(&re, content_type, 0);
 613                 need_to_free_re = 1;
 614         }
 615
 616         /* Learn about the user and room in question */
 617         CtdlGetUser(&CC->user, CC->curr_user);
 618         CtdlGetRelationship(&vbuf, &CC->user, &CC->room);
 619
 620         /* Load the message list */
 621         cdbfr = cdb_fetch(CDB_MSGLISTS, &CC->room.QRnumber, sizeof(long));
 622         if (cdbfr == NULL) {
 623                 if (need_to_free_re) regfree(&re);
 624                 return 0;       /* No messages at all?  No further action. */
 625         }
 626
 627         msglist = (long *) cdbfr->ptr;
 628         num_msgs = cdbfr->len / sizeof(long);
 629
 630         cdbfr->ptr = NULL;      /* clear this so that cdb_free() doesn't free it */
 631         cdb_free(cdbfr);        /* we own this memory now */
 632
 633         /*
 634          * Now begin the traversal.
 635          */
 636         if (num_msgs > 0) for (a = 0; a < num_msgs; ++a) {
 637
 638                 /* If the caller is looking for a specific MIME type, filter
 639                  * out all messages which are not of the type requested.
 640                  */
 641                 if ((content_type != NULL) && (!IsEmptyStr(content_type))) {
 642
 643                         /* This call to GetMetaData() sits inside this loop
 644                          * so that we only do the extra database read per msg
 645                          * if we need to.  Doing the extra read all the time
 646                          * really kills the server.  If we ever need to use
 647                          * metadata for another search criterion, we need to
 648                          * move the read somewhere else -- but still be smart
 649                          * enough to only do the read if the caller has
 650                          * specified something that will need it.
 651                          */
 652                         GetMetaData(&smi, msglist[a]);
 653
 654                         /* if (strcasecmp(smi.meta_content_type, content_type)) { old non-regex way */
 655                         if (regexec(&re, smi.meta_content_type, 1, &pm, 0) != 0) {
 656                                 msglist[a] = 0L;
 657                         }
 658                 }
 659         }
 660
 661         num_msgs = sort_msglist(msglist, num_msgs);
 662
 663         /* If a template was supplied, filter out the messages which
 664          * don't match.  (This could induce some delays!)
 665          */
 666         if (num_msgs > 0) {
 667                 if (compare != NULL) {
 668                         for (a = 0; a < num_msgs; ++a) {
 669                                 msg = CtdlFetchMessage(msglist[a], 1);
 670                                 if (msg != NULL) {
 671                                         if (CtdlMsgCmp(msg, compare)) {
 672                                                 msglist[a] = 0L;
 673                                         }
 674                                         CtdlFreeMessage(msg);
 675                                 }
 676                         }
 677                 }
 678         }
 679
 680         /* If a search string was specified, get a message list from
 681          * the full text index and remove messages which aren't on both
 682          * lists.
 683          *
 684          * How this works:
 685          * Since the lists are sorted and strictly ascending, and the
 686          * output list is guaranteed to be shorter than or equal to the
 687          * input list, we overwrite the bottom of the input list.  This
 688          * eliminates the need to memmove big chunks of the list over and
 689          * over again.
 690          */
 691         if ( (num_msgs > 0) && (mode == MSGS_SEARCH) && (search_string) ) {
 692
 693                 /* Call search module via hook mechanism.
 694                  * NULL means use any search function available.
 695                  * otherwise replace with a char * to name of search routine
 696                  */
 697                 CtdlModuleDoSearch(&num_search_msgs, &search_msgs, search_string, "fulltext");
 698
 699                 if (num_search_msgs > 0) {
 700
 701                         int orig_num_msgs;
 702
 703                         orig_num_msgs = num_msgs;
 704                         num_msgs = 0;
 705                         for (i=0; i<orig_num_msgs; ++i) {
 706                                 for (j=0; j<num_search_msgs; ++j) {
 707                                         if (msglist[i] == search_msgs[j]) {
 708                                                 msglist[num_msgs++] = msglist[i];
 709                                         }
 710                                 }
 711                         }
 712                 }
 713                 else {
 714                         num_msgs = 0;   /* No messages qualify */
 715                 }
 716                 if (search_msgs != NULL) free(search_msgs);
 717
 718                 /* Now that we've purged messages which don't contain the search
 719                  * string, treat a MSGS_SEARCH just like a MSGS_ALL from this
 720                  * point on.
 721                  */
 722                 mode = MSGS_ALL;
 723         }
 724
 725         /*
 726          * Now iterate through the message list, according to the
 727          * criteria supplied by the caller.
 728          */
 729         if (num_msgs > 0)
 730                 for (a = 0; a < num_msgs; ++a) {
 731                         thismsg = msglist[a];
 732                         if (mode == MSGS_ALL) {
 733                                 is_seen = 0;
 734                         }
 735                         else {
 736                                 is_seen = is_msg_in_sequence_set(
 737                                                         vbuf.v_seen, thismsg);
 738                                 if (is_seen) lastold = thismsg;
 739                         }
 740                         if ((thismsg > 0L)
 741                             && (
 742
 743                                        (mode == MSGS_ALL)
 744                                        || ((mode == MSGS_OLD) && (is_seen))
 745                                        || ((mode == MSGS_NEW) && (!is_seen))
 746                                        || ((mode == MSGS_LAST) && (a >= (num_msgs - ref)))
 747                                    || ((mode == MSGS_FIRST) && (a < ref))
 748                                 || ((mode == MSGS_GT) && (thismsg > ref))
 749                                 || ((mode == MSGS_LT) && (thismsg < ref))
 750                                 || ((mode == MSGS_EQ) && (thismsg == ref))
 751                             )
 752                             ) {
 753                                 if ((mode == MSGS_NEW) && (CC->user.flags & US_LASTOLD) && (lastold > 0L) && (printed_lastold == 0) && (!is_seen)) {
 754                                         if (CallBack)
 755                                                 CallBack(lastold, userdata);
 756                                         printed_lastold = 1;
 757                                         ++num_processed;
 758                                 }
 759                                 if (CallBack) CallBack(thismsg, userdata);
 760                                 ++num_processed;
 761                         }
 762                 }
 763         if (need_to_free_re) regfree(&re);
 764
 765         /*
 766          * We cache the most recent msglist in order to do security checks later
 767          */
 768         if (CC->client_socket > 0) {
 769                 if (CC->cached_msglist != NULL) {
 770                         free(CC->cached_msglist);
 771                 }
 772                 CC->cached_msglist = msglist;
 773                 CC->cached_num_msgs = num_msgs;
 774         }
 775         else {
 776                 free(msglist);
 777         }
 778
 779         return num_processed;
 780 }
 781
 782
 783
 784 /*
 785  * cmd_msgs()  -  get list of message #'s in this room
 786  *              implements the MSGS server command using CtdlForEachMessage()
 787  */
 788 void cmd_msgs(char *cmdbuf)
 789 {
 790         int mode = 0;
 791         char which[16];
 792         char buf[256];
 793         char tfield[256];
 794         char tvalue[256];
 795         int cm_ref = 0;
 796         int i;
 797         int with_template = 0;
 798         struct CtdlMessage *template = NULL;
 799         char search_string[1024];
 800         ForEachMsgCallback CallBack;
 801
 802         if (CtdlAccessCheck(ac_logged_in_or_guest)) return;
 803
 804         extract_token(which, cmdbuf, 0, '|', sizeof which);
 805         cm_ref = extract_int(cmdbuf, 1);
 806         extract_token(search_string, cmdbuf, 1, '|', sizeof search_string);
 807         with_template = extract_int(cmdbuf, 2);
 808         switch (extract_int(cmdbuf, 3))
 809         {
 810         default:
 811         case MSG_HDRS_BRIEF:
 812                 CallBack = simple_listing;
 813                 break;
 814         case MSG_HDRS_ALL:
 815                 CallBack = headers_listing;
 816                 break;
 817         case MSG_HDRS_EUID:
 818                 CallBack = headers_euid;
 819                 break;
 820         }
 821
 822         strcat(which, "   ");
 823         if (!strncasecmp(which, "OLD", 3))
 824                 mode = MSGS_OLD;
 825         else if (!strncasecmp(which, "NEW", 3))
 826                 mode = MSGS_NEW;
 827         else if (!strncasecmp(which, "FIRST", 5))
 828                 mode = MSGS_FIRST;
 829         else if (!strncasecmp(which, "LAST", 4))
 830                 mode = MSGS_LAST;
 831         else if (!strncasecmp(which, "GT", 2))
 832                 mode = MSGS_GT;
 833         else if (!strncasecmp(which, "LT", 2))
 834                 mode = MSGS_LT;
 835         else if (!strncasecmp(which, "SEARCH", 6))
 836                 mode = MSGS_SEARCH;
 837         else
 838                 mode = MSGS_ALL;
 839
 840         if ( (mode == MSGS_SEARCH) && (!config.c_enable_fulltext) ) {
 841                 cprintf("%d Full text index is not enabled on this server.\n",
 842                         ERROR + CMD_NOT_SUPPORTED);
 843                 return;
 844         }
 845
 846         if (with_template) {
 847                 unbuffer_output();
 848                 cprintf("%d Send template then receive message list\n",
 849                         START_CHAT_MODE);
 850                 template = (struct CtdlMessage *)
 851                         malloc(sizeof(struct CtdlMessage));
 852                 memset(template, 0, sizeof(struct CtdlMessage));
 853                 template->cm_magic = CTDLMESSAGE_MAGIC;
 854                 template->cm_anon_type = MES_NORMAL;
 855
 856                 while(client_getln(buf, sizeof buf) >= 0 && strcmp(buf,"000")) {
 857                         extract_token(tfield, buf, 0, '|', sizeof tfield);
 858                         extract_token(tvalue, buf, 1, '|', sizeof tvalue);
 859                         for (i='A'; i<='Z'; ++i) if (msgkeys[i]!=NULL) {
 860                                 if (!strcasecmp(tfield, msgkeys[i])) {
 861                                         template->cm_fields[i] =
 862                                                 strdup(tvalue);
 863                                 }
 864                         }
 865                 }
 866                 buffer_output();
 867         }
 868         else {
 869                 cprintf("%d  \n", LISTING_FOLLOWS);
 870         }
 871
 872         CtdlForEachMessage(mode,
 873                            ( (mode == MSGS_SEARCH) ? 0 : cm_ref ),
 874                            ( (mode == MSGS_SEARCH) ? search_string : NULL ),
 875                            NULL,
 876                            template,
 877                            CallBack,
 878                            NULL);
 879         if (template != NULL) CtdlFreeMessage(template);
 880         cprintf("000\n");
 881 }
 882
 883
 884
 885
 886 /*
 887  * help_subst()  -  support routine for help file viewer
 888  */
 889 void help_subst(char *strbuf, char *source, char *dest)
 890 {
 891         char workbuf[SIZ];
 892         int p;
 893
 894         while (p = pattern2(strbuf, source), (p >= 0)) {
 895                 strcpy(workbuf, &strbuf[p + strlen(source)]);
 896                 strcpy(&strbuf[p], dest);
 897                 strcat(strbuf, workbuf);
 898         }
 899 }
 900
 901
 902 void do_help_subst(char *buffer)
 903 {
 904         char buf2[16];
 905
 906         help_subst(buffer, "^nodename", config.c_nodename);
 907         help_subst(buffer, "^humannode", config.c_humannode);
 908         help_subst(buffer, "^fqdn", config.c_fqdn);
 909         help_subst(buffer, "^username", CC->user.fullname);
 910         snprintf(buf2, sizeof buf2, "%ld", CC->user.usernum);
 911         help_subst(buffer, "^usernum", buf2);
 912         help_subst(buffer, "^sysadm", config.c_sysadm);
 913         help_subst(buffer, "^variantname", CITADEL);
 914         snprintf(buf2, sizeof buf2, "%d", config.c_maxsessions);
 915         help_subst(buffer, "^maxsessions", buf2);
 916         help_subst(buffer, "^bbsdir", ctdl_message_dir);
 917 }
 918
 919
 920
 921 /*
 922  * memfmout()  -  Citadel text formatter and paginator.
 923  *           Although the original purpose of this routine was to format
 924  *           text to the reader's screen width, all we're really using it
 925  *           for here is to format text out to 80 columns before sending it
 926  *           to the client.  The client software may reformat it again.
 927  */
 928 void memfmout(
 929         char *mptr,             /* where are we going to get our text from? */
 930         const char *nl          /* string to terminate lines with */
 931 ) {
 932         int column = 0;
 933         unsigned char ch = 0;
 934         char outbuf[1024];
 935         int len = 0;
 936         int nllen = 0;
 937
 938         if (!mptr) return;
 939         nllen = strlen(nl);
 940         while (ch=*(mptr++), ch != 0) {
 941
 942                 if (ch == '\n') {
 943                         if (client_write(outbuf, len) == -1)
 944                         {
 945                                 syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 946                                 return;
 947                         }
 948                         len = 0;
 949                         if (client_write(nl, nllen) == -1)
 950                         {
 951                                 syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 952                                 return;
 953                         }
 954                         column = 0;
 955                 }
 956                 else if (ch == '\r') {
 957                         /* Ignore carriage returns.  Newlines are always LF or CRLF but never CR. */
 958                 }
 959                 else if (isspace(ch)) {
 960                         if (column > 72) {              /* Beyond 72 columns, break on the next space */
 961                                 if (client_write(outbuf, len) == -1)
 962                                 {
 963                                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 964                                         return;
 965                                 }
 966                                 len = 0;
 967                                 if (client_write(nl, nllen) == -1)
 968                                 {
 969                                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 970                                         return;
 971                                 }
 972                                 column = 0;
 973                         }
 974                         else {
 975                                 outbuf[len++] = ch;
 976                                 ++column;
 977                         }
 978                 }
 979                 else {
 980                         outbuf[len++] = ch;
 981                         ++column;
 982                         if (column > 1000) {            /* Beyond 1000 columns, break anywhere */
 983                                 if (client_write(outbuf, len) == -1)
 984                                 {
 985                                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 986                                         return;
 987                                 }
 988                                 len = 0;
 989                                 if (client_write(nl, nllen) == -1)
 990                                 {
 991                                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 992                                         return;
 993                                 }
 994                                 column = 0;
 995                         }
 996                 }
 997         }
 998         if (len) {
 999                 if (client_write(outbuf, len) == -1)
1000                 {
1001                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1002                         return;
1003                 }
1004                 len = 0;
1005                 client_write(nl, nllen);
1006                 column = 0;
1007         }
1008 }
1009
1010
1011
1012 /*
1013  * Callback function for mime parser that simply lists the part
1014  */
1015 void list_this_part(char *name, char *filename, char *partnum, char *disp,
1016                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1017                     char *cbid, void *cbuserdata)
1018 {
1019         struct ma_info *ma;
1020
1021         ma = (struct ma_info *)cbuserdata;
1022         if (ma->is_ma == 0) {
1023                 cprintf("part=%s|%s|%s|%s|%s|%ld|%s|%s\n",
1024                         name,
1025                         filename,
1026                         partnum,
1027                         disp,
1028                         cbtype,
1029                         (long)length,
1030                         cbid,
1031                         cbcharset);
1032         }
1033 }
1034
1035 /*
1036  * Callback function for multipart prefix
1037  */
1038 void list_this_pref(char *name, char *filename, char *partnum, char *disp,
1039                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1040                     char *cbid, void *cbuserdata)
1041 {
1042         struct ma_info *ma;
1043
1044         ma = (struct ma_info *)cbuserdata;
1045         if (!strcasecmp(cbtype, "multipart/alternative")) {
1046                 ++ma->is_ma;
1047         }
1048
1049         if (ma->is_ma == 0) {
1050                 cprintf("pref=%s|%s\n", partnum, cbtype);
1051         }
1052 }
1053
1054 /*
1055  * Callback function for multipart sufffix
1056  */
1057 void list_this_suff(char *name, char *filename, char *partnum, char *disp,
1058                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1059                     char *cbid, void *cbuserdata)
1060 {
1061         struct ma_info *ma;
1062
1063         ma = (struct ma_info *)cbuserdata;
1064         if (ma->is_ma == 0) {
1065                 cprintf("suff=%s|%s\n", partnum, cbtype);
1066         }
1067         if (!strcasecmp(cbtype, "multipart/alternative")) {
1068                 --ma->is_ma;
1069         }
1070 }
1071
1072
1073 /*
1074  * Callback function for mime parser that opens a section for downloading
1075  */
1076 void mime_download(char *name, char *filename, char *partnum, char *disp,
1077                    void *content, char *cbtype, char *cbcharset, size_t length,
1078                    char *encoding, char *cbid, void *cbuserdata)
1079 {
1080         int rv = 0;
1081         CitContext *CCC = MyContext();
1082
1083         /* Silently go away if there's already a download open. */
1084         if (CCC->download_fp != NULL)
1085                 return;
1086
1087         if (
1088                 (!IsEmptyStr(partnum) && (!strcasecmp(CCC->download_desired_section, partnum)))
1089         ||      (!IsEmptyStr(cbid) && (!strcasecmp(CCC->download_desired_section, cbid)))
1090         ) {
1091                 CCC->download_fp = tmpfile();
1092                 if (CCC->download_fp == NULL) {
1093                         syslog(LOG_EMERG, "mime_download(): Couldn't write: %s\n",
1094                                strerror(errno));
1095                         cprintf("%d cannot open temporary file: %s\n",
1096                                 ERROR + INTERNAL_ERROR, strerror(errno));
1097                         return;
1098                 }
1099
1100                 rv = fwrite(content, length, 1, CC->download_fp);
1101                 if (rv <= 0) {
1102                         syslog(LOG_EMERG, "mime_download(): Couldn't write: %s\n",
1103                                strerror(errno));
1104                         cprintf("%d unable to write tempfile.\n",
1105                                 ERROR + TOO_BIG);
1106                         fclose(CCC->download_fp);
1107                         CCC->download_fp = NULL;
1108                         return;
1109                 }
1110                 fflush(CCC->download_fp);
1111                 rewind(CCC->download_fp);
1112
1113                 OpenCmdResult(filename, cbtype);
1114         }
1115 }
1116
1117
1118
1119 /*
1120  * Callback function for mime parser that outputs a section all at once.
1121  * We can specify the desired section by part number *or* content-id.
1122  */
1123 void mime_spew_section(char *name, char *filename, char *partnum, char *disp,
1124                    void *content, char *cbtype, char *cbcharset, size_t length,
1125                    char *encoding, char *cbid, void *cbuserdata)
1126 {
1127         int *found_it = (int *)cbuserdata;
1128
1129         if (
1130                 (!IsEmptyStr(partnum) && (!strcasecmp(CC->download_desired_section, partnum)))
1131         ||      (!IsEmptyStr(cbid) && (!strcasecmp(CC->download_desired_section, cbid)))
1132         ) {
1133                 *found_it = 1;
1134                 cprintf("%d %d|-1|%s|%s|%s\n",
1135                         BINARY_FOLLOWS,
1136                         (int)length,
1137                         filename,
1138                         cbtype,
1139                         cbcharset
1140                 );
1141                 client_write(content, length);
1142         }
1143 }
1144
1145
1146 /*
1147  * Load a message from disk into memory.
1148  * This is used by CtdlOutputMsg() and other fetch functions.
1149  *
1150  * NOTE: Caller is responsible for freeing the returned CtdlMessage struct
1151  *       using the CtdlMessageFree() function.
1152  */
1153 struct CtdlMessage *CtdlFetchMessage(long msgnum, int with_body)
1154 {
1155         struct cdbdata *dmsgtext;
1156         struct CtdlMessage *ret = NULL;
1157         char *mptr;
1158         char *upper_bound;
1159         cit_uint8_t ch;
1160         cit_uint8_t field_header;
1161
1162         syslog(LOG_DEBUG, "CtdlFetchMessage(%ld, %d)\n", msgnum, with_body);
1163         dmsgtext = cdb_fetch(CDB_MSGMAIN, &msgnum, sizeof(long));
1164         if (dmsgtext == NULL) {
1165                 return NULL;
1166         }
1167         mptr = dmsgtext->ptr;
1168         upper_bound = mptr + dmsgtext->len;
1169
1170         /* Parse the three bytes that begin EVERY message on disk.
1171          * The first is always 0xFF, the on-disk magic number.
1172          * The second is the anonymous/public type byte.
1173          * The third is the format type byte (vari, fixed, or MIME).
1174          */
1175         ch = *mptr++;
1176         if (ch != 255) {
1177                 syslog(LOG_ERR, "Message %ld appears to be corrupted.\n", msgnum);
1178                 cdb_free(dmsgtext);
1179                 return NULL;
1180         }
1181         ret = (struct CtdlMessage *) malloc(sizeof(struct CtdlMessage));
1182         memset(ret, 0, sizeof(struct CtdlMessage));
1183
1184         ret->cm_magic = CTDLMESSAGE_MAGIC;
1185         ret->cm_anon_type = *mptr++;    /* Anon type byte */
1186         ret->cm_format_type = *mptr++;  /* Format type byte */
1187
1188         /*
1189          * The rest is zero or more arbitrary fields.  Load them in.
1190          * We're done when we encounter either a zero-length field or
1191          * have just processed the 'M' (message text) field.
1192          */
1193         do {
1194                 if (mptr >= upper_bound) {
1195                         break;
1196                 }
1197                 field_header = *mptr++;
1198                 ret->cm_fields[field_header] = strdup(mptr);
1199
1200                 while (*mptr++ != 0);   /* advance to next field */
1201
1202         } while ((mptr < upper_bound) && (field_header != 'M'));
1203
1204         cdb_free(dmsgtext);
1205
1206         /* Always make sure there's something in the msg text field.  If
1207          * it's NULL, the message text is most likely stored separately,
1208          * so go ahead and fetch that.  Failing that, just set a dummy
1209          * body so other code doesn't barf.
1210          */
1211         if ( (ret->cm_fields['M'] == NULL) && (with_body) ) {
1212                 dmsgtext = cdb_fetch(CDB_BIGMSGS, &msgnum, sizeof(long));
1213                 if (dmsgtext != NULL) {
1214                         ret->cm_fields['M'] = dmsgtext->ptr;
1215                         dmsgtext->ptr = NULL;
1216                         cdb_free(dmsgtext);
1217                 }
1218         }
1219         if (ret->cm_fields['M'] == NULL) {
1220                 ret->cm_fields['M'] = strdup("\r\n\r\n (no text)\r\n");
1221         }
1222
1223         /* Perform "before read" hooks (aborting if any return nonzero) */
1224         if (PerformMessageHooks(ret, EVT_BEFOREREAD) > 0) {
1225                 CtdlFreeMessage(ret);
1226                 return NULL;
1227         }
1228
1229         return (ret);
1230 }
1231
1232
1233 /*
1234  * Returns 1 if the supplied pointer points to a valid Citadel message.
1235  * If the pointer is NULL or the magic number check fails, returns 0.
1236  */
1237 int is_valid_message(struct CtdlMessage *msg) {
1238         if (msg == NULL)
1239                 return 0;
1240         if ((msg->cm_magic) != CTDLMESSAGE_MAGIC) {
1241                 syslog(LOG_WARNING, "is_valid_message() -- self-check failed\n");
1242                 return 0;
1243         }
1244         return 1;
1245 }
1246
1247 void CtdlFreeMessageContents(struct CtdlMessage *msg)
1248 {
1249         int i;
1250
1251         for (i = 0; i < 256; ++i)
1252                 if (msg->cm_fields[i] != NULL) {
1253                         free(msg->cm_fields[i]);
1254                 }
1255
1256         msg->cm_magic = 0;      /* just in case */
1257 }
1258 /*
1259  * 'Destructor' for struct CtdlMessage
1260  */
1261 void CtdlFreeMessage(struct CtdlMessage *msg)
1262 {
1263         if (is_valid_message(msg) == 0)
1264         {
1265                 if (msg != NULL) free (msg);
1266                 return;
1267         }
1268         CtdlFreeMessageContents(msg);
1269         free(msg);
1270 }
1271
1272
1273 /*
1274  * Pre callback function for multipart/alternative
1275  *
1276  * NOTE: this differs from the standard behavior for a reason.  Normally when
1277  *       displaying multipart/alternative you want to show the _last_ usable
1278  *       format in the message.  Here we show the _first_ one, because it's
1279  *       usually text/plain.  Since this set of functions is designed for text
1280  *       output to non-MIME-aware clients, this is the desired behavior.
1281  *
1282  */
1283 void fixed_output_pre(char *name, char *filename, char *partnum, char *disp,
1284                 void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1285                 char *cbid, void *cbuserdata)
1286 {
1287         struct ma_info *ma;
1288
1289         ma = (struct ma_info *)cbuserdata;
1290         syslog(LOG_DEBUG, "fixed_output_pre() type=<%s>\n", cbtype);
1291         if (!strcasecmp(cbtype, "multipart/alternative")) {
1292                 ++ma->is_ma;
1293                 ma->did_print = 0;
1294         }
1295         if (!strcasecmp(cbtype, "message/rfc822")) {
1296                 ++ma->freeze;
1297         }
1298 }
1299
1300 /*
1301  * Post callback function for multipart/alternative
1302  */
1303 void fixed_output_post(char *name, char *filename, char *partnum, char *disp,
1304                 void *content, char *cbtype, char *cbcharset, size_t length,
1305                 char *encoding, char *cbid, void *cbuserdata)
1306 {
1307         struct ma_info *ma;
1308
1309         ma = (struct ma_info *)cbuserdata;
1310         syslog(LOG_DEBUG, "fixed_output_post() type=<%s>\n", cbtype);
1311         if (!strcasecmp(cbtype, "multipart/alternative")) {
1312                 --ma->is_ma;
1313                 ma->did_print = 0;
1314         }
1315         if (!strcasecmp(cbtype, "message/rfc822")) {
1316                 --ma->freeze;
1317         }
1318 }
1319
1320 /*
1321  * Inline callback function for mime parser that wants to display text
1322  */
1323 void fixed_output(char *name, char *filename, char *partnum, char *disp,
1324                 void *content, char *cbtype, char *cbcharset, size_t length,
1325                 char *encoding, char *cbid, void *cbuserdata)
1326 {
1327         char *ptr;
1328         char *wptr;
1329         size_t wlen;
1330         struct ma_info *ma;
1331
1332         ma = (struct ma_info *)cbuserdata;
1333
1334         syslog(LOG_DEBUG,
1335                 "fixed_output() part %s: %s (%s) (%ld bytes)\n",
1336                 partnum, filename, cbtype, (long)length);
1337
1338         /*
1339          * If we're in the middle of a multipart/alternative scope and
1340          * we've already printed another section, skip this one.
1341          */
1342         if ( (ma->is_ma) && (ma->did_print) ) {
1343                 syslog(LOG_DEBUG, "Skipping part %s (%s)\n", partnum, cbtype);
1344                 return;
1345         }
1346         ma->did_print = 1;
1347
1348         if ( (!strcasecmp(cbtype, "text/plain"))
1349            || (IsEmptyStr(cbtype)) ) {
1350                 wptr = content;
1351                 if (length > 0) {
1352                         client_write(wptr, length);
1353                         if (wptr[length-1] != '\n') {
1354                                 cprintf("\n");
1355                         }
1356                 }
1357                 return;
1358         }
1359
1360         if (!strcasecmp(cbtype, "text/html")) {
1361                 ptr = html_to_ascii(content, length, 80, 0);
1362                 wlen = strlen(ptr);
1363                 client_write(ptr, wlen);
1364                 if ((wlen > 0) && (ptr[wlen-1] != '\n')) {
1365                         cprintf("\n");
1366                 }
1367                 free(ptr);
1368                 return;
1369         }
1370
1371         if (ma->use_fo_hooks) {
1372                 if (PerformFixedOutputHooks(cbtype, content, length)) {
1373                 /* above function returns nonzero if it handled the part */
1374                         return;
1375                 }
1376         }
1377
1378         if (strncasecmp(cbtype, "multipart/", 10)) {
1379                 cprintf("Part %s: %s (%s) (%ld bytes)\r\n",
1380                         partnum, filename, cbtype, (long)length);
1381                 return;
1382         }
1383 }
1384
1385 /*
1386  * The client is elegant and sophisticated and wants to be choosy about
1387  * MIME content types, so figure out which multipart/alternative part
1388  * we're going to send.
1389  *
1390  * We use a system of weights.  When we find a part that matches one of the
1391  * MIME types we've declared as preferential, we can store it in ma->chosen_part
1392  * and then set ma->chosen_pref to that MIME type's position in our preference
1393  * list.  If we then hit another match, we only replace the first match if
1394  * the preference value is lower.
1395  */
1396 void choose_preferred(char *name, char *filename, char *partnum, char *disp,
1397                 void *content, char *cbtype, char *cbcharset, size_t length,
1398                 char *encoding, char *cbid, void *cbuserdata)
1399 {
1400         char buf[1024];
1401         int i;
1402         struct ma_info *ma;
1403
1404         ma = (struct ma_info *)cbuserdata;
1405
1406         // NOTE: REMOVING THIS CONDITIONAL FIXES BUG 220
1407         //       http://bugzilla.citadel.org/show_bug.cgi?id=220
1408         // I don't know if there are any side effects!  Please TEST TEST TEST
1409         //if (ma->is_ma > 0) {
1410
1411         for (i=0; i<num_tokens(CC->preferred_formats, '|'); ++i) {
1412                 extract_token(buf, CC->preferred_formats, i, '|', sizeof buf);
1413                 if ( (!strcasecmp(buf, cbtype)) && (!ma->freeze) ) {
1414                         if (i < ma->chosen_pref) {
1415                                 syslog(LOG_DEBUG, "Setting chosen part: <%s>\n", partnum);
1416                                 safestrncpy(ma->chosen_part, partnum, sizeof ma->chosen_part);
1417                                 ma->chosen_pref = i;
1418                         }
1419                 }
1420         }
1421 }
1422
1423 /*
1424  * Now that we've chosen our preferred part, output it.
1425  */
1426 void output_preferred(char *name,
1427                       char *filename,
1428                       char *partnum,
1429                       char *disp,
1430                       void *content,
1431                       char *cbtype,
1432                       char *cbcharset,
1433                       size_t length,
1434                       char *encoding,
1435                       char *cbid,
1436                       void *cbuserdata)
1437 {
1438         int i;
1439         char buf[128];
1440         int add_newline = 0;
1441         char *text_content;
1442         struct ma_info *ma;
1443         char *decoded = NULL;
1444         size_t bytes_decoded;
1445         int rc = 0;
1446
1447         ma = (struct ma_info *)cbuserdata;
1448
1449         /* This is not the MIME part you're looking for... */
1450         if (strcasecmp(partnum, ma->chosen_part)) return;
1451
1452         /* If the content-type of this part is in our preferred formats
1453          * list, we can simply output it verbatim.
1454          */
1455         for (i=0; i<num_tokens(CC->preferred_formats, '|'); ++i) {
1456                 extract_token(buf, CC->preferred_formats, i, '|', sizeof buf);
1457                 if (!strcasecmp(buf, cbtype)) {
1458                         /* Yeah!  Go!  W00t!! */
1459                         if (ma->dont_decode == 0)
1460                                 rc = mime_decode_now (content,
1461                                                       length,
1462                                                       encoding,
1463                                                       &decoded,
1464                                                       &bytes_decoded);
1465                         if (rc < 0)
1466                                 break; /* Give us the chance, maybe theres another one. */
1467
1468                         if (rc == 0) text_content = (char *)content;
1469                         else {
1470                                 text_content = decoded;
1471                                 length = bytes_decoded;
1472                         }
1473
1474                         if (text_content[length-1] != '\n') {
1475                                 ++add_newline;
1476                         }
1477                         cprintf("Content-type: %s", cbtype);
1478                         if (!IsEmptyStr(cbcharset)) {
1479                                 cprintf("; charset=%s", cbcharset);
1480                         }
1481                         cprintf("\nContent-length: %d\n",
1482                                 (int)(length + add_newline) );
1483                         if (!IsEmptyStr(encoding)) {
1484                                 cprintf("Content-transfer-encoding: %s\n", encoding);
1485                         }
1486                         else {
1487                                 cprintf("Content-transfer-encoding: 7bit\n");
1488                         }
1489                         cprintf("X-Citadel-MSG4-Partnum: %s\n", partnum);
1490                         cprintf("\n");
1491                         if (client_write(text_content, length) == -1)
1492                         {
1493                                 syslog(LOG_ERR, "output_preferred(): aborting due to write failure.\n");
1494                                 return;
1495                         }
1496                         if (add_newline) cprintf("\n");
1497                         if (decoded != NULL) free(decoded);
1498                         return;
1499                 }
1500         }
1501
1502         /* No translations required or possible: output as text/plain */
1503         cprintf("Content-type: text/plain\n\n");
1504         rc = 0;
1505         if (ma->dont_decode == 0)
1506                 rc = mime_decode_now (content,
1507                                       length,
1508                                       encoding,
1509                                       &decoded,
1510                                       &bytes_decoded);
1511         if (rc < 0)
1512                 return; /* Give us the chance, maybe theres another one. */
1513
1514         if (rc == 0) text_content = (char *)content;
1515         else {
1516                 text_content = decoded;
1517                 length = bytes_decoded;
1518         }
1519
1520         fixed_output(name, filename, partnum, disp, text_content, cbtype, cbcharset,
1521                         length, encoding, cbid, cbuserdata);
1522         if (decoded != NULL) free(decoded);
1523 }
1524
1525
1526 struct encapmsg {
1527         char desired_section[64];
1528         char *msg;
1529         size_t msglen;
1530 };
1531
1532
1533 /*
1534  * Callback function for
1535  */
1536 void extract_encapsulated_message(char *name, char *filename, char *partnum, char *disp,
1537                    void *content, char *cbtype, char *cbcharset, size_t length,
1538                    char *encoding, char *cbid, void *cbuserdata)
1539 {
1540         struct encapmsg *encap;
1541
1542         encap = (struct encapmsg *)cbuserdata;
1543
1544         /* Only proceed if this is the desired section... */
1545         if (!strcasecmp(encap->desired_section, partnum)) {
1546                 encap->msglen = length;
1547                 encap->msg = malloc(length + 2);
1548                 memcpy(encap->msg, content, length);
1549                 return;
1550         }
1551 }
1552
1553
1554 /*
1555  * Determine whether the specified message exists in the cached_msglist
1556  * (This is a security check)
1557  */
1558 int check_cached_msglist(long msgnum) {
1559
1560         /* cases in which we skip the check */
1561         if (!CC) return om_ok;                                          /* not a session */
1562         if (CC->client_socket <= 0) return om_ok;                       /* not a client session */
1563         if (CC->cached_msglist == NULL) return om_access_denied;        /* no msglist fetched */
1564         if (CC->cached_num_msgs == 0) return om_access_denied;          /* nothing to check */
1565
1566
1567         /* Do a binary search within the cached_msglist for the requested msgnum */
1568         int min = 0;
1569         int max = (CC->cached_num_msgs - 1);
1570
1571         while (max >= min) {
1572                 int middle = min + (max-min) / 2 ;
1573                 if (msgnum == CC->cached_msglist[middle]) {
1574                         return om_ok;
1575                 }
1576                 if (msgnum > CC->cached_msglist[middle]) {
1577                         min = middle + 1;
1578                 }
1579                 else {
1580                         max = middle - 1;
1581                 }
1582         }
1583
1584         return om_access_denied;
1585 }
1586
1587
1588 /*
1589  * Determine whether the currently logged in session has permission to read
1590  * messages in the current room.
1591  */
1592 int CtdlDoIHavePermissionToReadMessagesInThisRoom(void) {
1593         if (    (!(CC->logged_in))
1594                 && (!(CC->internal_pgm))
1595                 && (!config.c_guest_logins)
1596         ) {
1597                 return(om_not_logged_in);
1598         }
1599         return(om_ok);
1600 }
1601
1602
1603 /*
1604  * Get a message off disk.  (returns om_* values found in msgbase.h)
1605  *
1606  */
1607 int CtdlOutputMsg(long msg_num,         /* message number (local) to fetch */
1608                   int mode,             /* how would you like that message? */
1609                   int headers_only,     /* eschew the message body? */
1610                   int do_proto,         /* do Citadel protocol responses? */
1611                   int crlf,             /* Use CRLF newlines instead of LF? */
1612                   char *section,        /* NULL or a message/rfc822 section */
1613                   int flags             /* various flags; see msgbase.h */
1614 ) {
1615         struct CtdlMessage *TheMessage = NULL;
1616         int retcode = om_no_such_msg;
1617         struct encapmsg encap;
1618         int r;
1619
1620         syslog(LOG_DEBUG, "CtdlOutputMsg(msgnum=%ld, mode=%d, section=%s)\n",
1621                 msg_num, mode,
1622                 (section ? section : "<>")
1623         );
1624
1625         r = CtdlDoIHavePermissionToReadMessagesInThisRoom();
1626         if (r != om_ok) {
1627                 if (do_proto) {
1628                         if (r == om_not_logged_in) {
1629                                 cprintf("%d Not logged in.\n", ERROR + NOT_LOGGED_IN);
1630                         }
1631                         else {
1632                                 cprintf("%d An unknown error has occurred.\n", ERROR);
1633                         }
1634                 }
1635                 return(r);
1636         }
1637
1638         /*
1639          * Check to make sure the message is actually IN this room
1640          */
1641         r = check_cached_msglist(msg_num);
1642         if (r == om_access_denied) {
1643                 /* Not in the cache?  We get ONE shot to check it again. */
1644                 CtdlForEachMessage(MSGS_ALL, 0L, NULL, NULL, NULL, NULL, NULL);
1645                 r = check_cached_msglist(msg_num);
1646         }
1647         if (r != om_ok) {
1648                 syslog(LOG_DEBUG, "Security check fail: message %ld is not in %s\n",
1649                         msg_num, CC->room.QRname
1650                 );
1651                 if (do_proto) {
1652                         if (r == om_access_denied) {
1653                                 cprintf("%d message %ld was not found in this room\n",
1654                                         ERROR + HIGHER_ACCESS_REQUIRED,
1655                                         msg_num
1656                                 );
1657                         }
1658                 }
1659                 return(r);
1660         }
1661
1662         /*
1663          * Fetch the message from disk.  If we're in HEADERS_FAST mode,
1664          * request that we don't even bother loading the body into memory.
1665          */
1666         if (headers_only == HEADERS_FAST) {
1667                 TheMessage = CtdlFetchMessage(msg_num, 0);
1668         }
1669         else {
1670                 TheMessage = CtdlFetchMessage(msg_num, 1);
1671         }
1672
1673         if (TheMessage == NULL) {
1674                 if (do_proto) cprintf("%d Can't locate msg %ld on disk\n",
1675                         ERROR + MESSAGE_NOT_FOUND, msg_num);
1676                 return(om_no_such_msg);
1677         }
1678
1679         /* Here is the weird form of this command, to process only an
1680          * encapsulated message/rfc822 section.
1681          */
1682         if (section) if (!IsEmptyStr(section)) if (strcmp(section, "0")) {
1683                 memset(&encap, 0, sizeof encap);
1684                 safestrncpy(encap.desired_section, section, sizeof encap.desired_section);
1685                 mime_parser(TheMessage->cm_fields['M'],
1686                         NULL,
1687                         *extract_encapsulated_message,
1688                         NULL, NULL, (void *)&encap, 0
1689                 );
1690                 CtdlFreeMessage(TheMessage);
1691                 TheMessage = NULL;
1692
1693                 if (encap.msg) {
1694                         encap.msg[encap.msglen] = 0;
1695                         TheMessage = convert_internet_message(encap.msg);
1696                         encap.msg = NULL;       /* no free() here, TheMessage owns it now */
1697
1698                         /* Now we let it fall through to the bottom of this
1699                          * function, because TheMessage now contains the
1700                          * encapsulated message instead of the top-level
1701                          * message.  Isn't that neat?
1702                          */
1703
1704                 }
1705                 else {
1706                         if (do_proto) cprintf("%d msg %ld has no part %s\n",
1707                                 ERROR + MESSAGE_NOT_FOUND, msg_num, section);
1708                         retcode = om_no_such_msg;
1709                 }
1710
1711         }
1712
1713         /* Ok, output the message now */
1714         retcode = CtdlOutputPreLoadedMsg(TheMessage, mode, headers_only, do_proto, crlf, flags);
1715         CtdlFreeMessage(TheMessage);
1716
1717         return(retcode);
1718 }
1719
1720
1721 char *qp_encode_email_addrs(char *source)
1722 {
1723         char *user, *node, *name;
1724         const char headerStr[] = "=?UTF-8?Q?";
1725         char *Encoded;
1726         char *EncodedName;
1727         char *nPtr;
1728         int need_to_encode = 0;
1729         long SourceLen;
1730         long EncodedMaxLen;
1731         long nColons = 0;
1732         long *AddrPtr;
1733         long *AddrUtf8;
1734         long nAddrPtrMax = 50;
1735         long nmax;
1736         int InQuotes = 0;
1737         int i, n;
1738
1739         if (source == NULL) return source;
1740         if (IsEmptyStr(source)) return source;
1741         cit_backtrace();
1742         syslog(LOG_DEBUG, "qp_encode_email_addrs: [%s]\n", source);
1743
1744         AddrPtr = malloc (sizeof (long) * nAddrPtrMax);
1745         AddrUtf8 = malloc (sizeof (long) * nAddrPtrMax);
1746         memset(AddrUtf8, 0, sizeof (long) * nAddrPtrMax);
1747         *AddrPtr = 0;
1748         i = 0;
1749         while (!IsEmptyStr (&source[i])) {
1750                 if (nColons >= nAddrPtrMax){
1751                         long *ptr;
1752
1753                         ptr = (long *) malloc(sizeof (long) * nAddrPtrMax * 2);
1754                         memcpy (ptr, AddrPtr, sizeof (long) * nAddrPtrMax);
1755                         free (AddrPtr), AddrPtr = ptr;
1756
1757                         ptr = (long *) malloc(sizeof (long) * nAddrPtrMax * 2);
1758                         memset(&ptr[nAddrPtrMax], 0,
1759                                sizeof (long) * nAddrPtrMax);
1760
1761                         memcpy (ptr, AddrUtf8, sizeof (long) * nAddrPtrMax);
1762                         free (AddrUtf8), AddrUtf8 = ptr;
1763                         nAddrPtrMax *= 2;
1764                 }
1765                 if (((unsigned char) source[i] < 32) ||
1766                     ((unsigned char) source[i] > 126)) {
1767                         need_to_encode = 1;
1768                         AddrUtf8[nColons] = 1;
1769                 }
1770                 if (source[i] == '"')
1771                         InQuotes = !InQuotes;
1772                 if (!InQuotes && source[i] == ',') {
1773                         AddrPtr[nColons] = i;
1774                         nColons++;
1775                 }
1776                 i++;
1777         }
1778         if (need_to_encode == 0) {
1779                 free(AddrPtr);
1780                 free(AddrUtf8);
1781                 return source;
1782         }
1783
1784         SourceLen = i;
1785         EncodedMaxLen = nColons * (sizeof(headerStr) + 3) + SourceLen * 3;
1786         Encoded = (char*) malloc (EncodedMaxLen);
1787
1788         for (i = 0; i < nColons; i++)
1789                 source[AddrPtr[i]++] = '\0';
1790         /* TODO: if libidn, this might get larger*/
1791         user = malloc(SourceLen + 1);
1792         node = malloc(SourceLen + 1);
1793         name = malloc(SourceLen + 1);
1794
1795         nPtr = Encoded;
1796         *nPtr = '\0';
1797         for (i = 0; i < nColons && nPtr != NULL; i++) {
1798                 nmax = EncodedMaxLen - (nPtr - Encoded);
1799                 if (AddrUtf8[i]) {
1800                         process_rfc822_addr(&source[AddrPtr[i]],
1801                                             user,
1802                                             node,
1803                                             name);
1804                         /* TODO: libIDN here ! */
1805                         if (IsEmptyStr(name)) {
1806                                 n = snprintf(nPtr, nmax,
1807                                              (i==0)?"%s@%s" : ",%s@%s",
1808                                              user, node);
1809                         }
1810                         else {
1811                                 EncodedName = rfc2047encode(name, strlen(name));
1812                                 n = snprintf(nPtr, nmax,
1813                                              (i==0)?"%s <%s@%s>" : ",%s <%s@%s>",
1814                                              EncodedName, user, node);
1815                                 free(EncodedName);
1816                         }
1817                 }
1818                 else {
1819                         n = snprintf(nPtr, nmax,
1820                                      (i==0)?"%s" : ",%s",
1821                                      &source[AddrPtr[i]]);
1822                 }
1823                 if (n > 0 )
1824                         nPtr += n;
1825                 else {
1826                         char *ptr, *nnPtr;
1827                         ptr = (char*) malloc(EncodedMaxLen * 2);
1828                         memcpy(ptr, Encoded, EncodedMaxLen);
1829                         nnPtr = ptr + (nPtr - Encoded), nPtr = nnPtr;
1830                         free(Encoded), Encoded = ptr;
1831                         EncodedMaxLen *= 2;
1832                         i--; /* do it once more with properly lengthened buffer */
1833                 }
1834         }
1835         for (i = 0; i < nColons; i++)
1836                 source[--AddrPtr[i]] = ',';
1837
1838         free(user);
1839         free(node);
1840         free(name);
1841         free(AddrUtf8);
1842         free(AddrPtr);
1843         return Encoded;
1844 }
1845
1846
1847 /* If the last item in a list of recipients was truncated to a partial address,
1848  * remove it completely in order to avoid choking libSieve
1849  */
1850 void sanitize_truncated_recipient(char *str)
1851 {
1852         if (!str) return;
1853         if (num_tokens(str, ',') < 2) return;
1854
1855         int len = strlen(str);
1856         if (len < 900) return;
1857         if (len > 998) str[998] = 0;
1858
1859         char *cptr = strrchr(str, ',');
1860         if (!cptr) return;
1861
1862         char *lptr = strchr(cptr, '<');
1863         char *rptr = strchr(cptr, '>');
1864
1865         if ( (lptr) && (rptr) && (rptr > lptr) ) return;
1866
1867         *cptr = 0;
1868 }
1869
1870
1871 void OutputCtdlMsgHeaders(
1872         struct CtdlMessage *TheMessage,
1873         int do_proto)           /* do Citadel protocol responses? */
1874 {
1875         char allkeys[30];
1876         int i, k, n;
1877         int suppress_f = 0;
1878         char buf[SIZ];
1879         char display_name[256];
1880
1881         /* begin header processing loop for Citadel message format */
1882         safestrncpy(display_name, "<unknown>", sizeof display_name);
1883         if (TheMessage->cm_fields['A']) {
1884                 strcpy(buf, TheMessage->cm_fields['A']);
1885                 if (TheMessage->cm_anon_type == MES_ANONONLY) {
1886                         safestrncpy(display_name, "****", sizeof display_name);
1887                 }
1888                 else if (TheMessage->cm_anon_type == MES_ANONOPT) {
1889                         safestrncpy(display_name, "anonymous", sizeof display_name);
1890                 }
1891                 else {
1892                         safestrncpy(display_name, buf, sizeof display_name);
1893                 }
1894                 if ((is_room_aide())
1895                     && ((TheMessage->cm_anon_type == MES_ANONONLY)
1896                         || (TheMessage->cm_anon_type == MES_ANONOPT))) {
1897                         size_t tmp = strlen(display_name);
1898                         snprintf(&display_name[tmp],
1899                                  sizeof display_name - tmp,
1900                                  " [%s]", buf);
1901                 }
1902         }
1903
1904         /* Don't show Internet address for users on the
1905          * local Citadel network.
1906          */
1907         suppress_f = 0;
1908         if (TheMessage->cm_fields['N'] != NULL)
1909                 if (!IsEmptyStr(TheMessage->cm_fields['N']))
1910                         if (haschar(TheMessage->cm_fields['N'], '.') == 0) {
1911                                 suppress_f = 1;
1912                         }
1913
1914         /* Now spew the header fields in the order we like them. */
1915         n = safestrncpy(allkeys, FORDER, sizeof allkeys);
1916         for (i=0; i<n; ++i) {
1917                 k = (int) allkeys[i];
1918                 if (k != 'M') {
1919                         if ( (TheMessage->cm_fields[k] != NULL)
1920                              && (msgkeys[k] != NULL) ) {
1921                                 if ((k == 'V') || (k == 'R') || (k == 'Y')) {
1922                                         sanitize_truncated_recipient(TheMessage->cm_fields[k]);
1923                                 }
1924                                 if (k == 'A') {
1925                                         if (do_proto) cprintf("%s=%s\n",
1926                                                               msgkeys[k],
1927                                                               display_name);
1928                                 }
1929                                 else if ((k == 'F') && (suppress_f)) {
1930                                         /* do nothing */
1931                                 }
1932                                 /* Masquerade display name if needed */
1933                                 else {
1934                                         if (do_proto) cprintf("%s=%s\n",
1935                                                               msgkeys[k],
1936                                                               TheMessage->cm_fields[k]
1937                                                 );
1938                                 }
1939                         }
1940                 }
1941         }
1942
1943 }
1944
1945 void OutputRFC822MsgHeaders(
1946         struct CtdlMessage *TheMessage,
1947         int flags,              /* should the bessage be exported clean */
1948         const char *nl,
1949         char *mid, long sizeof_mid,
1950         char *suser, long sizeof_suser,
1951         char *luser, long sizeof_luser,
1952         char *fuser, long sizeof_fuser,
1953         char *snode, long sizeof_snode)
1954 {
1955         char datestamp[100];
1956         int subject_found = 0;
1957         char buf[SIZ];
1958         int i, j, k;
1959         char *mptr = NULL;
1960         char *mpptr = NULL;
1961         char *hptr;
1962
1963         for (i = 0; i < 256; ++i) {
1964                 if (TheMessage->cm_fields[i]) {
1965                         mptr = mpptr = TheMessage->cm_fields[i];
1966
1967                         if (i == 'A') {
1968                                 safestrncpy(luser, mptr, sizeof_luser);
1969                                 safestrncpy(suser, mptr, sizeof_suser);
1970                         }
1971                         else if (i == 'Y') {
1972                                 if ((flags & QP_EADDR) != 0) {
1973                                         mptr = qp_encode_email_addrs(mptr);
1974                                 }
1975                                 sanitize_truncated_recipient(mptr);
1976                                 cprintf("CC: %s%s", mptr, nl);
1977                         }
1978                         else if (i == 'P') {
1979                                 cprintf("Return-Path: %s%s", mptr, nl);
1980                         }
1981                         else if (i == 'L') {
1982                                 cprintf("List-ID: %s%s", mptr, nl);
1983                         }
1984                         else if (i == 'V') {
1985                                 if ((flags & QP_EADDR) != 0)
1986                                         mptr = qp_encode_email_addrs(mptr);
1987                                 hptr = mptr;
1988                                 while ((*hptr != '\0') && isspace(*hptr))
1989                                         hptr ++;
1990                                 if (!IsEmptyStr(hptr))
1991                                         cprintf("Envelope-To: %s%s", hptr, nl);
1992                         }
1993                         else if (i == 'U') {
1994                                 cprintf("Subject: %s%s", mptr, nl);
1995                                 subject_found = 1;
1996                         }
1997                         else if (i == 'I')
1998                                 safestrncpy(mid, mptr, sizeof_mid); /// TODO: detect @ here and copy @nodename in if not found.
1999                         else if (i == 'F')
2000                                 safestrncpy(fuser, mptr, sizeof_fuser);
2001                         /* else if (i == 'O')
2002                            cprintf("X-Citadel-Room: %s%s",
2003                            mptr, nl); */
2004                         else if (i == 'N')
2005                                 safestrncpy(snode, mptr, sizeof_snode);
2006                         else if (i == 'R')
2007                         {
2008                                 if (haschar(mptr, '@') == 0)
2009                                 {
2010                                         sanitize_truncated_recipient(mptr);
2011                                         cprintf("To: %s@%s", mptr, config.c_fqdn);
2012                                         cprintf("%s", nl);
2013                                 }
2014                                 else
2015                                 {
2016                                         if ((flags & QP_EADDR) != 0) {
2017                                                 mptr = qp_encode_email_addrs(mptr);
2018                                         }
2019                                         sanitize_truncated_recipient(mptr);
2020                                         cprintf("To: %s", mptr);
2021                                         cprintf("%s", nl);
2022                                 }
2023                         }
2024                         else if (i == 'T') {
2025                                 datestring(datestamp, sizeof datestamp,
2026                                            atol(mptr), DATESTRING_RFC822);
2027                                 cprintf("Date: %s%s", datestamp, nl);
2028                         }
2029                         else if (i == 'W') {
2030                                 cprintf("References: ");
2031                                 k = num_tokens(mptr, '|');
2032                                 for (j=0; j<k; ++j) {
2033                                         extract_token(buf, mptr, j, '|', sizeof buf);
2034                                         cprintf("<%s>", buf);
2035                                         if (j == (k-1)) {
2036                                                 cprintf("%s", nl);
2037                                         }
2038                                         else {
2039                                                 cprintf(" ");
2040                                         }
2041                                 }
2042                         }
2043                         else if (i == 'K') {
2044                                 hptr = mptr;
2045                                 while ((*hptr != '\0') && isspace(*hptr))
2046                                         hptr ++;
2047                                 if (!IsEmptyStr(hptr))
2048                                         cprintf("Reply-To: %s%s", mptr, nl);
2049                         }
2050                         if (mptr != mpptr)
2051                                 free (mptr);
2052                 }
2053         }
2054         if (subject_found == 0) {
2055                 cprintf("Subject: (no subject)%s", nl);
2056         }
2057 }
2058
2059
2060 void Dump_RFC822HeadersBody(
2061         struct CtdlMessage *TheMessage,
2062         int headers_only,       /* eschew the message body? */
2063         int flags,              /* should the bessage be exported clean? */
2064
2065         const char *nl)
2066 {
2067         cit_uint8_t prev_ch;
2068         int eoh = 0;
2069         const char *StartOfText = StrBufNOTNULL;
2070         char outbuf[1024];
2071         int outlen = 0;
2072         int nllen = strlen(nl);
2073         char *mptr;
2074
2075         mptr = TheMessage->cm_fields['M'];
2076
2077
2078         prev_ch = '\0';
2079         while (*mptr != '\0') {
2080                 if (*mptr == '\r') {
2081                         /* do nothing */
2082                 }
2083                 else {
2084                         if ((!eoh) &&
2085                             (*mptr == '\n'))
2086                         {
2087                                 eoh = (*(mptr+1) == '\r') && (*(mptr+2) == '\n');
2088                                 if (!eoh)
2089                                         eoh = *(mptr+1) == '\n';
2090                                 if (eoh)
2091                                 {
2092                                         StartOfText = mptr;
2093                                         StartOfText = strchr(StartOfText, '\n');
2094                                         StartOfText = strchr(StartOfText, '\n');
2095                                 }
2096                         }
2097                         if (((headers_only == HEADERS_NONE) && (mptr >= StartOfText)) ||
2098                             ((headers_only == HEADERS_ONLY) && (mptr < StartOfText)) ||
2099                             ((headers_only != HEADERS_NONE) &&
2100                              (headers_only != HEADERS_ONLY))
2101                                 ) {
2102                                 if (*mptr == '\n') {
2103                                         memcpy(&outbuf[outlen], nl, nllen);
2104                                         outlen += nllen;
2105                                         outbuf[outlen] = '\0';
2106                                 }
2107                                 else {
2108                                         outbuf[outlen++] = *mptr;
2109                                 }
2110                         }
2111                 }
2112                 if (flags & ESC_DOT)
2113                 {
2114                         if ((prev_ch == '\n') &&
2115                             (*mptr == '.') &&
2116                             ((*(mptr+1) == '\r') || (*(mptr+1) == '\n')))
2117                         {
2118                                 outbuf[outlen++] = '.';
2119                         }
2120                         prev_ch = *mptr;
2121                 }
2122                 ++mptr;
2123                 if (outlen > 1000) {
2124                         if (client_write(outbuf, outlen) == -1)
2125                         {
2126                                 syslog(LOG_ERR, "Dump_RFC822HeadersBody(): aborting due to write failure.\n");
2127                                 return;
2128                         }
2129                         outlen = 0;
2130                 }
2131         }
2132         if (outlen > 0) {
2133                 client_write(outbuf, outlen);
2134                 outlen = 0;
2135         }
2136 }
2137
2138
2139
2140 /* If the format type on disk is 1 (fixed-format), then we want
2141  * everything to be output completely literally ... regardless of
2142  * what message transfer format is in use.
2143  */
2144 void DumpFormatFixed(
2145         struct CtdlMessage *TheMessage,
2146         int mode,               /* how would you like that message? */
2147         const char *nl)
2148 {
2149         cit_uint8_t ch;
2150         char buf[SIZ];
2151         int buflen;
2152         int xlline = 0;
2153         int nllen = strlen (nl);
2154         char *mptr;
2155
2156         mptr = TheMessage->cm_fields['M'];
2157
2158         if (mode == MT_MIME) {
2159                 cprintf("Content-type: text/plain\n\n");
2160         }
2161         *buf = '\0';
2162         buflen = 0;
2163         while (ch = *mptr++, ch > 0) {
2164                 if (ch == '\n')
2165                         ch = '\r';
2166
2167                 if ((buflen > 250) && (!xlline)){
2168                         int tbuflen;
2169                         tbuflen = buflen;
2170
2171                         while ((buflen > 0) &&
2172                                (!isspace(buf[buflen])))
2173                                 buflen --;
2174                         if (buflen == 0) {
2175                                 xlline = 1;
2176                         }
2177                         else {
2178                                 mptr -= tbuflen - buflen;
2179                                 buf[buflen] = '\0';
2180                                 ch = '\r';
2181                         }
2182                 }
2183                 /* if we reach the outer bounds of our buffer,
2184                    abort without respect what whe purge. */
2185                 if (xlline &&
2186                     ((isspace(ch)) ||
2187                      (buflen > SIZ - nllen - 2)))
2188                         ch = '\r';
2189
2190                 if (ch == '\r') {
2191                         memcpy (&buf[buflen], nl, nllen);
2192                         buflen += nllen;
2193                         buf[buflen] = '\0';
2194
2195                         if (client_write(buf, buflen) == -1)
2196                         {
2197                                 syslog(LOG_ERR, "DumpFormatFixed(): aborting due to write failure.\n");
2198                                 return;
2199                         }
2200                         *buf = '\0';
2201                         buflen = 0;
2202                         xlline = 0;
2203                 } else {
2204                         buf[buflen] = ch;
2205                         buflen++;
2206                 }
2207         }
2208         buf[buflen] = '\0';
2209         if (!IsEmptyStr(buf))
2210                 cprintf("%s%s", buf, nl);
2211 }
2212
2213 /*
2214  * Get a message off disk.  (returns om_* values found in msgbase.h)
2215  */
2216 int CtdlOutputPreLoadedMsg(
2217                 struct CtdlMessage *TheMessage,
2218                 int mode,               /* how would you like that message? */
2219                 int headers_only,       /* eschew the message body? */
2220                 int do_proto,           /* do Citadel protocol responses? */
2221                 int crlf,               /* Use CRLF newlines instead of LF? */
2222                 int flags               /* should the bessage be exported clean? */
2223 ) {
2224         int i;
2225         char *mptr = NULL;
2226         const char *nl; /* newline string */
2227         struct ma_info ma;
2228
2229         /* Buffers needed for RFC822 translation.  These are all filled
2230          * using functions that are bounds-checked, and therefore we can
2231          * make them substantially smaller than SIZ.
2232          */
2233         char suser[100];
2234         char luser[100];
2235         char fuser[100];
2236         char snode[100];
2237         char mid[100];
2238
2239         syslog(LOG_DEBUG, "CtdlOutputPreLoadedMsg(TheMessage=%s, %d, %d, %d, %d\n",
2240                 ((TheMessage == NULL) ? "NULL" : "not null"),
2241                 mode, headers_only, do_proto, crlf);
2242
2243         strcpy(mid, "unknown");
2244         nl = (crlf ? "\r\n" : "\n");
2245
2246         if (!is_valid_message(TheMessage)) {
2247                 syslog(LOG_ERR,
2248                         "ERROR: invalid preloaded message for output\n");
2249                 cit_backtrace ();
2250                 return(om_no_such_msg);
2251         }
2252
2253         /* Suppress envelope recipients if required to avoid disclosing BCC addresses.
2254          * Pad it with spaces in order to avoid changing the RFC822 length of the message.
2255          */
2256         if ( (flags & SUPPRESS_ENV_TO) && (TheMessage->cm_fields['V'] != NULL) ) {
2257                 memset(TheMessage->cm_fields['V'], ' ', strlen(TheMessage->cm_fields['V']));
2258         }
2259
2260         /* Are we downloading a MIME component? */
2261         if (mode == MT_DOWNLOAD) {
2262                 if (TheMessage->cm_format_type != FMT_RFC822) {
2263                         if (do_proto)
2264                                 cprintf("%d This is not a MIME message.\n",
2265                                 ERROR + ILLEGAL_VALUE);
2266                 } else if (CC->download_fp != NULL) {
2267                         if (do_proto) cprintf(
2268                                 "%d You already have a download open.\n",
2269                                 ERROR + RESOURCE_BUSY);
2270                 } else {
2271                         /* Parse the message text component */
2272                         mptr = TheMessage->cm_fields['M'];
2273                         mime_parser(mptr, NULL, *mime_download, NULL, NULL, NULL, 0);
2274                         /* If there's no file open by this time, the requested
2275                          * section wasn't found, so print an error
2276                          */
2277                         if (CC->download_fp == NULL) {
2278                                 if (do_proto) cprintf(
2279                                         "%d Section %s not found.\n",
2280                                         ERROR + FILE_NOT_FOUND,
2281                                         CC->download_desired_section);
2282                         }
2283                 }
2284                 return((CC->download_fp != NULL) ? om_ok : om_mime_error);
2285         }
2286
2287         /* MT_SPEW_SECTION is like MT_DOWNLOAD except it outputs the whole MIME part
2288          * in a single server operation instead of opening a download file.
2289          */
2290         if (mode == MT_SPEW_SECTION) {
2291                 if (TheMessage->cm_format_type != FMT_RFC822) {
2292                         if (do_proto)
2293                                 cprintf("%d This is not a MIME message.\n",
2294                                 ERROR + ILLEGAL_VALUE);
2295                 } else {
2296                         /* Parse the message text component */
2297                         int found_it = 0;
2298
2299                         mptr = TheMessage->cm_fields['M'];
2300                         mime_parser(mptr, NULL, *mime_spew_section, NULL, NULL, (void *)&found_it, 0);
2301                         /* If section wasn't found, print an error
2302                          */
2303                         if (!found_it) {
2304                                 if (do_proto) cprintf(
2305                                         "%d Section %s not found.\n",
2306                                         ERROR + FILE_NOT_FOUND,
2307                                         CC->download_desired_section);
2308                         }
2309                 }
2310                 return((CC->download_fp != NULL) ? om_ok : om_mime_error);
2311         }
2312
2313         /* now for the user-mode message reading loops */
2314         if (do_proto) cprintf("%d msg:\n", LISTING_FOLLOWS);
2315
2316         /* Does the caller want to skip the headers? */
2317         if (headers_only == HEADERS_NONE) goto START_TEXT;
2318
2319         /* Tell the client which format type we're using. */
2320         if ( (mode == MT_CITADEL) && (do_proto) ) {
2321                 cprintf("type=%d\n", TheMessage->cm_format_type);
2322         }
2323
2324         /* nhdr=yes means that we're only displaying headers, no body */
2325         if ( (TheMessage->cm_anon_type == MES_ANONONLY)
2326            && ((mode == MT_CITADEL) || (mode == MT_MIME))
2327            && (do_proto)
2328            ) {
2329                 cprintf("nhdr=yes\n");
2330         }
2331
2332         if ((mode == MT_CITADEL) || (mode == MT_MIME))
2333                 OutputCtdlMsgHeaders(TheMessage, do_proto);
2334
2335
2336         /* begin header processing loop for RFC822 transfer format */
2337         strcpy(suser, "");
2338         strcpy(luser, "");
2339         strcpy(fuser, "");
2340         strcpy(snode, NODENAME);
2341         if (mode == MT_RFC822)
2342                 OutputRFC822MsgHeaders(
2343                         TheMessage,
2344                         flags,
2345                         nl,
2346                         mid, sizeof(mid),
2347                         suser, sizeof(suser),
2348                         luser, sizeof(luser),
2349                         fuser, sizeof(fuser),
2350                         snode, sizeof(snode)
2351                         );
2352
2353
2354         for (i=0; !IsEmptyStr(&suser[i]); ++i) {
2355                 suser[i] = tolower(suser[i]);
2356                 if (!isalnum(suser[i])) suser[i]='_';
2357         }
2358
2359         if (mode == MT_RFC822) {
2360                 if (!strcasecmp(snode, NODENAME)) {
2361                         safestrncpy(snode, FQDN, sizeof snode);
2362                 }
2363
2364                 /* Construct a fun message id */
2365                 cprintf("Message-ID: <%s", mid);/// todo: this possibly breaks threadding mails.
2366                 if (strchr(mid, '@')==NULL) {
2367                         cprintf("@%s", snode);
2368                 }
2369                 cprintf(">%s", nl);
2370
2371                 if (!is_room_aide() && (TheMessage->cm_anon_type == MES_ANONONLY)) {
2372                         cprintf("From: \"----\" <x@x.org>%s", nl);
2373                 }
2374                 else if (!is_room_aide() && (TheMessage->cm_anon_type == MES_ANONOPT)) {
2375                         cprintf("From: \"anonymous\" <x@x.org>%s", nl);
2376                 }
2377                 else if (!IsEmptyStr(fuser)) {
2378                         cprintf("From: \"%s\" <%s>%s", luser, fuser, nl);
2379                 }
2380                 else {
2381                         cprintf("From: \"%s\" <%s@%s>%s", luser, suser, snode, nl);
2382                 }
2383
2384                 /* Blank line signifying RFC822 end-of-headers */
2385                 if (TheMessage->cm_format_type != FMT_RFC822) {
2386                         cprintf("%s", nl);
2387                 }
2388         }
2389
2390         /* end header processing loop ... at this point, we're in the text */
2391 START_TEXT:
2392         if (headers_only == HEADERS_FAST) goto DONE;
2393
2394         /* Tell the client about the MIME parts in this message */
2395         if (TheMessage->cm_format_type == FMT_RFC822) {
2396                 if ( (mode == MT_CITADEL) || (mode == MT_MIME) ) {
2397                         mptr = TheMessage->cm_fields['M'];
2398                         memset(&ma, 0, sizeof(struct ma_info));
2399                         mime_parser(mptr, NULL,
2400                                 (do_proto ? *list_this_part : NULL),
2401                                 (do_proto ? *list_this_pref : NULL),
2402                                 (do_proto ? *list_this_suff : NULL),
2403                                 (void *)&ma, 1);
2404                 }
2405                 else if (mode == MT_RFC822) {   /* unparsed RFC822 dump */
2406                         Dump_RFC822HeadersBody(
2407                                 TheMessage,
2408                                 headers_only,
2409                                 flags,
2410                                 nl);
2411                         goto DONE;
2412                 }
2413         }
2414
2415         if (headers_only == HEADERS_ONLY) {
2416                 goto DONE;
2417         }
2418
2419         /* signify start of msg text */
2420         if ( (mode == MT_CITADEL) || (mode == MT_MIME) ) {
2421                 if (do_proto) cprintf("text\n");
2422         }
2423
2424         if (TheMessage->cm_format_type == FMT_FIXED)
2425                 DumpFormatFixed(
2426                         TheMessage,
2427                         mode,           /* how would you like that message? */
2428                         nl);
2429
2430         /* If the message on disk is format 0 (Citadel vari-format), we
2431          * output using the formatter at 80 columns.  This is the final output
2432          * form if the transfer format is RFC822, but if the transfer format
2433          * is Citadel proprietary, it'll still work, because the indentation
2434          * for new paragraphs is correct and the client will reformat the
2435          * message to the reader's screen width.
2436          */
2437         if (TheMessage->cm_format_type == FMT_CITADEL) {
2438                 mptr = TheMessage->cm_fields['M'];
2439
2440                 if (mode == MT_MIME) {
2441                         cprintf("Content-type: text/x-citadel-variformat\n\n");
2442                 }
2443                 memfmout(mptr, nl);
2444         }
2445
2446         /* If the message on disk is format 4 (MIME), we've gotta hand it
2447          * off to the MIME parser.  The client has already been told that
2448          * this message is format 1 (fixed format), so the callback function
2449          * we use will display those parts as-is.
2450          */
2451         if (TheMessage->cm_format_type == FMT_RFC822) {
2452                 memset(&ma, 0, sizeof(struct ma_info));
2453
2454                 if (mode == MT_MIME) {
2455                         ma.use_fo_hooks = 0;
2456                         strcpy(ma.chosen_part, "1");
2457                         ma.chosen_pref = 9999;
2458                         ma.dont_decode = CC->msg4_dont_decode;
2459                         mime_parser(mptr, NULL,
2460                                 *choose_preferred, *fixed_output_pre,
2461                                 *fixed_output_post, (void *)&ma, 1);
2462                         mime_parser(mptr, NULL,
2463                                 *output_preferred, NULL, NULL, (void *)&ma, 1);
2464                 }
2465                 else {
2466                         ma.use_fo_hooks = 1;
2467                         mime_parser(mptr, NULL,
2468                                 *fixed_output, *fixed_output_pre,
2469                                 *fixed_output_post, (void *)&ma, 0);
2470                 }
2471
2472         }
2473
2474 DONE:   /* now we're done */
2475         if (do_proto) cprintf("000\n");
2476         return(om_ok);
2477 }
2478
2479
2480 /*
2481  * display a message (mode 0 - Citadel proprietary)
2482  */
2483 void cmd_msg0(char *cmdbuf)
2484 {
2485         long msgid;
2486         int headers_only = HEADERS_ALL;
2487
2488         msgid = extract_long(cmdbuf, 0);
2489         headers_only = extract_int(cmdbuf, 1);
2490
2491         CtdlOutputMsg(msgid, MT_CITADEL, headers_only, 1, 0, NULL, 0);
2492         return;
2493 }
2494
2495
2496 /*
2497  * display a message (mode 2 - RFC822)
2498  */
2499 void cmd_msg2(char *cmdbuf)
2500 {
2501         long msgid;
2502         int headers_only = HEADERS_ALL;
2503
2504         msgid = extract_long(cmdbuf, 0);
2505         headers_only = extract_int(cmdbuf, 1);
2506
2507         CtdlOutputMsg(msgid, MT_RFC822, headers_only, 1, 1, NULL, 0);
2508 }
2509
2510
2511
2512 /*
2513  * display a message (mode 3 - IGnet raw format - internal programs only)
2514  */
2515 void cmd_msg3(char *cmdbuf)
2516 {
2517         long msgnum;
2518         struct CtdlMessage *msg = NULL;
2519         struct ser_ret smr;
2520
2521         if (CC->internal_pgm == 0) {
2522                 cprintf("%d This command is for internal programs only.\n",
2523                         ERROR + HIGHER_ACCESS_REQUIRED);
2524                 return;
2525         }
2526
2527         msgnum = extract_long(cmdbuf, 0);
2528         msg = CtdlFetchMessage(msgnum, 1);
2529         if (msg == NULL) {
2530                 cprintf("%d Message %ld not found.\n",
2531                         ERROR + MESSAGE_NOT_FOUND, msgnum);
2532                 return;
2533         }
2534
2535         serialize_message(&smr, msg);
2536         CtdlFreeMessage(msg);
2537
2538         if (smr.len == 0) {
2539                 cprintf("%d Unable to serialize message\n",
2540                         ERROR + INTERNAL_ERROR);
2541                 return;
2542         }
2543
2544         cprintf("%d %ld\n", BINARY_FOLLOWS, (long)smr.len);
2545         client_write((char *)smr.ser, (int)smr.len);
2546         free(smr.ser);
2547 }
2548
2549
2550
2551 /*
2552  * Display a message using MIME content types
2553  */
2554 void cmd_msg4(char *cmdbuf)
2555 {
2556         long msgid;
2557         char section[64];
2558
2559         msgid = extract_long(cmdbuf, 0);
2560         extract_token(section, cmdbuf, 1, '|', sizeof section);
2561         CtdlOutputMsg(msgid, MT_MIME, 0, 1, 0, (section[0] ? section : NULL) , 0);
2562 }
2563
2564
2565
2566 /*
2567  * Client tells us its preferred message format(s)
2568  */
2569 void cmd_msgp(char *cmdbuf)
2570 {
2571         if (!strcasecmp(cmdbuf, "dont_decode")) {
2572                 CC->msg4_dont_decode = 1;
2573                 cprintf("%d MSG4 will not pre-decode messages.\n", CIT_OK);
2574         }
2575         else {
2576                 safestrncpy(CC->preferred_formats, cmdbuf, sizeof(CC->preferred_formats));
2577                 cprintf("%d Preferred MIME formats have been set.\n", CIT_OK);
2578         }
2579 }
2580
2581
2582 /*
2583  * Open a component of a MIME message as a download file
2584  */
2585 void cmd_opna(char *cmdbuf)
2586 {
2587         long msgid;
2588         char desired_section[128];
2589
2590         msgid = extract_long(cmdbuf, 0);
2591         extract_token(desired_section, cmdbuf, 1, '|', sizeof desired_section);
2592         safestrncpy(CC->download_desired_section, desired_section,
2593                 sizeof CC->download_desired_section);
2594         CtdlOutputMsg(msgid, MT_DOWNLOAD, 0, 1, 1, NULL, 0);
2595 }
2596
2597
2598 /*
2599  * Open a component of a MIME message and transmit it all at once
2600  */
2601 void cmd_dlat(char *cmdbuf)
2602 {
2603         long msgid;
2604         char desired_section[128];
2605
2606         msgid = extract_long(cmdbuf, 0);
2607         extract_token(desired_section, cmdbuf, 1, '|', sizeof desired_section);
2608         safestrncpy(CC->download_desired_section, desired_section,
2609                 sizeof CC->download_desired_section);
2610         CtdlOutputMsg(msgid, MT_SPEW_SECTION, 0, 1, 1, NULL, 0);
2611 }
2612
2613
2614 /*
2615  * Save one or more message pointers into a specified room
2616  * (Returns 0 for success, nonzero for failure)
2617  * roomname may be NULL to use the current room
2618  *
2619  * Note that the 'supplied_msg' field may be set to NULL, in which case
2620  * the message will be fetched from disk, by number, if we need to perform
2621  * replication checks.  This adds an additional database read, so if the
2622  * caller already has the message in memory then it should be supplied.  (Obviously
2623  * this mode of operation only works if we're saving a single message.)
2624  */
2625 int CtdlSaveMsgPointersInRoom(char *roomname, long newmsgidlist[], int num_newmsgs,
2626                         int do_repl_check, struct CtdlMessage *supplied_msg, int suppress_refcount_adj
2627 ) {
2628         int i, j, unique;
2629         char hold_rm[ROOMNAMELEN];
2630         struct cdbdata *cdbfr;
2631         int num_msgs;
2632         long *msglist;
2633         long highest_msg = 0L;
2634
2635         long msgid = 0;
2636         struct CtdlMessage *msg = NULL;
2637
2638         long *msgs_to_be_merged = NULL;
2639         int num_msgs_to_be_merged = 0;
2640
2641         syslog(LOG_DEBUG,
2642                 "CtdlSaveMsgPointersInRoom(room=%s, num_msgs=%d, repl=%d, suppress_rca=%d)\n",
2643                 roomname, num_newmsgs, do_repl_check, suppress_refcount_adj
2644         );
2645
2646         strcpy(hold_rm, CC->room.QRname);
2647
2648         /* Sanity checks */
2649         if (newmsgidlist == NULL) return(ERROR + INTERNAL_ERROR);
2650         if (num_newmsgs < 1) return(ERROR + INTERNAL_ERROR);
2651         if (num_newmsgs > 1) supplied_msg = NULL;
2652
2653         /* Now the regular stuff */
2654         if (CtdlGetRoomLock(&CC->room,
2655            ((roomname != NULL) ? roomname : CC->room.QRname) )
2656            != 0) {
2657                 syslog(LOG_ERR, "No such room <%s>\n", roomname);
2658                 return(ERROR + ROOM_NOT_FOUND);
2659         }
2660
2661
2662         msgs_to_be_merged = malloc(sizeof(long) * num_newmsgs);
2663         num_msgs_to_be_merged = 0;
2664
2665
2666         cdbfr = cdb_fetch(CDB_MSGLISTS, &CC->room.QRnumber, sizeof(long));
2667         if (cdbfr == NULL) {
2668                 msglist = NULL;
2669                 num_msgs = 0;
2670         } else {
2671                 msglist = (long *) cdbfr->ptr;
2672                 cdbfr->ptr = NULL;      /* CtdlSaveMsgPointerInRoom() now owns this memory */
2673                 num_msgs = cdbfr->len / sizeof(long);
2674                 cdb_free(cdbfr);
2675         }
2676
2677
2678         /* Create a list of msgid's which were supplied by the caller, but do
2679          * not already exist in the target room.  It is absolutely taboo to
2680          * have more than one reference to the same message in a room.
2681          */
2682         for (i=0; i<num_newmsgs; ++i) {
2683                 unique = 1;
2684                 if (num_msgs > 0) for (j=0; j<num_msgs; ++j) {
2685                         if (msglist[j] == newmsgidlist[i]) {
2686                                 unique = 0;
2687                         }
2688                 }
2689                 if (unique) {
2690                         msgs_to_be_merged[num_msgs_to_be_merged++] = newmsgidlist[i];
2691                 }
2692         }
2693
2694         syslog(LOG_DEBUG, "%d unique messages to be merged\n", num_msgs_to_be_merged);
2695
2696         /*
2697          * Now merge the new messages
2698          */
2699         msglist = realloc(msglist, (sizeof(long) * (num_msgs + num_msgs_to_be_merged)) );
2700         if (msglist == NULL) {
2701                 syslog(LOG_ALERT, "ERROR: can't realloc message list!\n");
2702         }
2703         memcpy(&msglist[num_msgs], msgs_to_be_merged, (sizeof(long) * num_msgs_to_be_merged) );
2704         num_msgs += num_msgs_to_be_merged;
2705
2706         /* Sort the message list, so all the msgid's are in order */
2707         num_msgs = sort_msglist(msglist, num_msgs);
2708
2709         /* Determine the highest message number */
2710         highest_msg = msglist[num_msgs - 1];
2711
2712         /* Write it back to disk. */
2713         cdb_store(CDB_MSGLISTS, &CC->room.QRnumber, (int)sizeof(long),
2714                   msglist, (int)(num_msgs * sizeof(long)));
2715
2716         /* Free up the memory we used. */
2717         free(msglist);
2718
2719         /* Update the highest-message pointer and unlock the room. */
2720         CC->room.QRhighest = highest_msg;
2721         CtdlPutRoomLock(&CC->room);
2722
2723         /* Perform replication checks if necessary */
2724         if ( (DoesThisRoomNeedEuidIndexing(&CC->room)) && (do_repl_check) ) {
2725                 syslog(LOG_DEBUG, "CtdlSaveMsgPointerInRoom() doing repl checks\n");
2726
2727                 for (i=0; i<num_msgs_to_be_merged; ++i) {
2728                         msgid = msgs_to_be_merged[i];
2729
2730                         if (supplied_msg != NULL) {
2731                                 msg = supplied_msg;
2732                         }
2733                         else {
2734                                 msg = CtdlFetchMessage(msgid, 0);
2735                         }
2736
2737                         if (msg != NULL) {
2738                                 ReplicationChecks(msg);
2739
2740                                 /* If the message has an Exclusive ID, index that... */
2741                                 if (msg->cm_fields['E'] != NULL) {
2742                                         index_message_by_euid(msg->cm_fields['E'], &CC->room, msgid);
2743                                 }
2744
2745                                 /* Free up the memory we may have allocated */
2746                                 if (msg != supplied_msg) {
2747                                         CtdlFreeMessage(msg);
2748                                 }
2749                         }
2750
2751                 }
2752         }
2753
2754         else {
2755                 syslog(LOG_DEBUG, "CtdlSaveMsgPointerInRoom() skips repl checks\n");
2756         }
2757
2758         /* Submit this room for processing by hooks */
2759         PerformRoomHooks(&CC->room);
2760
2761         /* Go back to the room we were in before we wandered here... */
2762         CtdlGetRoom(&CC->room, hold_rm);
2763
2764         /* Bump the reference count for all messages which were merged */
2765         if (!suppress_refcount_adj) {
2766                 for (i=0; i<num_msgs_to_be_merged; ++i) {
2767                         AdjRefCount(msgs_to_be_merged[i], +1);
2768                 }
2769         }
2770
2771         /* Free up memory... */
2772         if (msgs_to_be_merged != NULL) {
2773                 free(msgs_to_be_merged);
2774         }
2775
2776         /* Return success. */
2777         return (0);
2778 }
2779
2780
2781 /*
2782  * This is the same as CtdlSaveMsgPointersInRoom() but it only accepts
2783  * a single message.
2784  */
2785 int CtdlSaveMsgPointerInRoom(char *roomname, long msgid,
2786                              int do_repl_check, struct CtdlMessage *supplied_msg)
2787 {
2788         return CtdlSaveMsgPointersInRoom(roomname, &msgid, 1, do_repl_check, supplied_msg, 0);
2789 }
2790
2791
2792
2793
2794 /*
2795  * Message base operation to save a new message to the message store
2796  * (returns new message number)
2797  *
2798  * This is the back end for CtdlSubmitMsg() and should not be directly
2799  * called by server-side modules.
2800  *
2801  */
2802 long send_message(struct CtdlMessage *msg) {
2803         long newmsgid;
2804         long retval;
2805         char msgidbuf[256];
2806         struct ser_ret smr;
2807         int is_bigmsg = 0;
2808         char *holdM = NULL;
2809
2810         /* Get a new message number */
2811         newmsgid = get_new_message_number();
2812         snprintf(msgidbuf, sizeof msgidbuf, "%08lX-%08lX@%s",
2813                  (long unsigned int) time(NULL),
2814                  (long unsigned int) newmsgid,
2815                  config.c_fqdn
2816                 );
2817
2818         /* Generate an ID if we don't have one already */
2819         if (msg->cm_fields['I']==NULL) {
2820                 msg->cm_fields['I'] = strdup(msgidbuf);
2821         }
2822
2823         /* If the message is big, set its body aside for storage elsewhere */
2824         if (msg->cm_fields['M'] != NULL) {
2825                 if (strlen(msg->cm_fields['M']) > BIGMSG) {
2826                         is_bigmsg = 1;
2827                         holdM = msg->cm_fields['M'];
2828                         msg->cm_fields['M'] = NULL;
2829                 }
2830         }
2831
2832         /* Serialize our data structure for storage in the database */
2833         serialize_message(&smr, msg);
2834
2835         if (is_bigmsg) {
2836                 msg->cm_fields['M'] = holdM;
2837         }
2838
2839         if (smr.len == 0) {
2840                 cprintf("%d Unable to serialize message\n",
2841                         ERROR + INTERNAL_ERROR);
2842                 return (-1L);
2843         }
2844
2845         /* Write our little bundle of joy into the message base */
2846         if (cdb_store(CDB_MSGMAIN, &newmsgid, (int)sizeof(long),
2847                       smr.ser, smr.len) < 0) {
2848                 syslog(LOG_ERR, "Can't store message\n");
2849                 retval = 0L;
2850         } else {
2851                 if (is_bigmsg) {
2852                         cdb_store(CDB_BIGMSGS,
2853                                   &newmsgid,
2854                                   (int)sizeof(long),
2855                                   holdM,
2856                                   (strlen(holdM) + 1)
2857                                 );
2858                 }
2859                 retval = newmsgid;
2860         }
2861
2862         /* Free the memory we used for the serialized message */
2863         free(smr.ser);
2864
2865         /* Return the *local* message ID to the caller
2866          * (even if we're storing an incoming network message)
2867          */
2868         return(retval);
2869 }
2870
2871
2872
2873 /*
2874  * Serialize a struct CtdlMessage into the format used on disk and network.
2875  *
2876  * This function loads up a "struct ser_ret" (defined in server.h) which
2877  * contains the length of the serialized message and a pointer to the
2878  * serialized message in memory.  THE LATTER MUST BE FREED BY THE CALLER.
2879  */
2880 void serialize_message(struct ser_ret *ret,             /* return values */
2881                        struct CtdlMessage *msg) /* unserialized msg */
2882 {
2883         size_t wlen, fieldlen;
2884         int i;
2885         static char *forder = FORDER;
2886
2887         /*
2888          * Check for valid message format
2889          */
2890         if (is_valid_message(msg) == 0) {
2891                 syslog(LOG_ERR, "serialize_message() aborting due to invalid message\n");
2892                 ret->len = 0;
2893                 ret->ser = NULL;
2894                 return;
2895         }
2896
2897         ret->len = 3;
2898         for (i=0; i<26; ++i) if (msg->cm_fields[(int)forder[i]] != NULL)
2899                                      ret->len = ret->len +
2900                                              strlen(msg->cm_fields[(int)forder[i]]) + 2;
2901
2902         ret->ser = malloc(ret->len);
2903         if (ret->ser == NULL) {
2904                 syslog(LOG_ERR, "serialize_message() malloc(%ld) failed: %s\n",
2905                        (long)ret->len, strerror(errno));
2906                 ret->len = 0;
2907                 ret->ser = NULL;
2908                 return;
2909         }
2910
2911         ret->ser[0] = 0xFF;
2912         ret->ser[1] = msg->cm_anon_type;
2913         ret->ser[2] = msg->cm_format_type;
2914         wlen = 3;
2915
2916         for (i=0; i<26; ++i) if (msg->cm_fields[(int)forder[i]] != NULL) {
2917                         fieldlen = strlen(msg->cm_fields[(int)forder[i]]);
2918                         ret->ser[wlen++] = (char)forder[i];
2919                         safestrncpy((char *)&ret->ser[wlen], msg->cm_fields[(int)forder[i]], fieldlen+1);
2920                         wlen = wlen + fieldlen + 1;
2921                 }
2922         if (ret->len != wlen) syslog(LOG_ERR, "ERROR: len=%ld wlen=%ld\n",
2923                                      (long)ret->len, (long)wlen);
2924
2925         return;
2926 }
2927
2928
2929 /*
2930  * Serialize a struct CtdlMessage into the format used on disk and network.
2931  *
2932  * This function loads up a "struct ser_ret" (defined in server.h) which
2933  * contains the length of the serialized message and a pointer to the
2934  * serialized message in memory.  THE LATTER MUST BE FREED BY THE CALLER.
2935  */
2936 void dump_message(struct CtdlMessage *msg,      /* unserialized msg */
2937                   long Siz)                     /* how many chars ? */
2938 {
2939         int i;
2940         static char *forder = FORDER;
2941         char *buf;
2942
2943         /*
2944          * Check for valid message format
2945          */
2946         if (is_valid_message(msg) == 0) {
2947                 syslog(LOG_ERR, "dump_message() aborting due to invalid message\n");
2948                 return;
2949         }
2950
2951         buf = (char*) malloc (Siz + 1);
2952
2953         for (i=0; i<26; ++i) if (msg->cm_fields[(int)forder[i]] != NULL) {
2954                         snprintf (buf, Siz, " msg[%c] = %s ...\n", (char) forder[i],
2955                                    msg->cm_fields[(int)forder[i]]);
2956                         if (client_write (buf, strlen(buf)) == -1)
2957                         {
2958                                 syslog(LOG_ERR, "dump_message(): aborting due to write failure.\n");
2959                                 return;
2960                         }
2961                 }
2962
2963         return;
2964 }
2965
2966
2967
2968 /*
2969  * Check to see if any messages already exist in the current room which
2970  * carry the same Exclusive ID as this one.  If any are found, delete them.
2971  */
2972 void ReplicationChecks(struct CtdlMessage *msg) {
2973         long old_msgnum = (-1L);
2974
2975         if (DoesThisRoomNeedEuidIndexing(&CC->room) == 0) return;
2976
2977         syslog(LOG_DEBUG, "Performing replication checks in <%s>\n",
2978                CC->room.QRname);
2979
2980         /* No exclusive id?  Don't do anything. */
2981         if (msg == NULL) return;
2982         if (msg->cm_fields['E'] == NULL) return;
2983         if (IsEmptyStr(msg->cm_fields['E'])) return;
2984         /*syslog(LOG_DEBUG, "Exclusive ID: <%s> for room <%s>\n",
2985           msg->cm_fields['E'], CC->room.QRname);*/
2986
2987         old_msgnum = CtdlLocateMessageByEuid(msg->cm_fields['E'], &CC->room);
2988         if (old_msgnum > 0L) {
2989                 syslog(LOG_DEBUG, "ReplicationChecks() replacing message %ld\n", old_msgnum);
2990                 CtdlDeleteMessages(CC->room.QRname, &old_msgnum, 1, "");
2991         }
2992 }
2993
2994
2995
2996 /*
2997  * Save a message to disk and submit it into the delivery system.
2998  */
2999 long CtdlSubmitMsg(struct CtdlMessage *msg,     /* message to save */
3000                    struct recptypes *recps,     /* recipients (if mail) */
3001                    const char *force,           /* force a particular room? */
3002                    int flags                    /* should the message be exported clean? */
3003         )
3004 {
3005         char submit_filename[128];
3006         char generated_timestamp[32];
3007         char hold_rm[ROOMNAMELEN];
3008         char actual_rm[ROOMNAMELEN];
3009         char force_room[ROOMNAMELEN];
3010         char content_type[SIZ];                 /* We have to learn this */
3011         char recipient[SIZ];
3012         long newmsgid;
3013         const char *mptr = NULL;
3014         struct ctdluser userbuf;
3015         int a, i;
3016         struct MetaData smi;
3017         FILE *network_fp = NULL;
3018         static int seqnum = 1;
3019         struct CtdlMessage *imsg = NULL;
3020         char *instr = NULL;
3021         size_t instr_alloc = 0;
3022         struct ser_ret smr;
3023         char *hold_R, *hold_D;
3024         char *collected_addresses = NULL;
3025         struct addresses_to_be_filed *aptr = NULL;
3026         StrBuf *saved_rfc822_version = NULL;
3027         int qualified_for_journaling = 0;
3028         CitContext *CCC = MyContext();
3029         char bounce_to[1024] = "";
3030         size_t tmp = 0;
3031         int rv = 0;
3032
3033         syslog(LOG_DEBUG, "CtdlSubmitMsg() called\n");
3034         if (is_valid_message(msg) == 0) return(-1);     /* self check */
3035
3036         /* If this message has no timestamp, we take the liberty of
3037          * giving it one, right now.
3038          */
3039         if (msg->cm_fields['T'] == NULL) {
3040                 snprintf(generated_timestamp, sizeof generated_timestamp, "%ld", (long)time(NULL));
3041                 msg->cm_fields['T'] = strdup(generated_timestamp);
3042         }
3043
3044         /* If this message has no path, we generate one.
3045          */
3046         if (msg->cm_fields['P'] == NULL) {
3047                 if (msg->cm_fields['A'] != NULL) {
3048                         msg->cm_fields['P'] = strdup(msg->cm_fields['A']);
3049                         for (a=0; !IsEmptyStr(&msg->cm_fields['P'][a]); ++a) {
3050                                 if (isspace(msg->cm_fields['P'][a])) {
3051                                         msg->cm_fields['P'][a] = ' ';
3052                                 }
3053                         }
3054                 }
3055                 else {
3056                         msg->cm_fields['P'] = strdup("unknown");
3057                 }
3058         }
3059
3060         if (force == NULL) {
3061                 strcpy(force_room, "");
3062         }
3063         else {
3064                 strcpy(force_room, force);
3065         }
3066
3067         /* Learn about what's inside, because it's what's inside that counts */
3068         if (msg->cm_fields['M'] == NULL) {
3069                 syslog(LOG_ERR, "ERROR: attempt to save message with NULL body\n");
3070                 return(-2);
3071         }
3072
3073         switch (msg->cm_format_type) {
3074         case 0:
3075                 strcpy(content_type, "text/x-citadel-variformat");
3076                 break;
3077         case 1:
3078                 strcpy(content_type, "text/plain");
3079                 break;
3080         case 4:
3081                 strcpy(content_type, "text/plain");
3082                 mptr = bmstrcasestr(msg->cm_fields['M'], "Content-type:");
3083                 if (mptr != NULL) {
3084                         char *aptr;
3085                         safestrncpy(content_type, &mptr[13], sizeof content_type);
3086                         striplt(content_type);
3087                         aptr = content_type;
3088                         while (!IsEmptyStr(aptr)) {
3089                                 if ((*aptr == ';')
3090                                     || (*aptr == ' ')
3091                                     || (*aptr == 13)
3092                                     || (*aptr == 10)) {
3093                                         *aptr = 0;
3094                                 }
3095                                 else aptr++;
3096                         }
3097                 }
3098         }
3099
3100         /* Goto the correct room */
3101         syslog(LOG_DEBUG, "Selected room %s\n", (recps) ? CCC->room.QRname : SENTITEMS);
3102         strcpy(hold_rm, CCC->room.QRname);
3103         strcpy(actual_rm, CCC->room.QRname);
3104         if (recps != NULL) {
3105                 strcpy(actual_rm, SENTITEMS);
3106         }
3107
3108         /* If the user is a twit, move to the twit room for posting */
3109         if (TWITDETECT) {
3110                 if (CCC->user.axlevel == AxProbU) {
3111                         strcpy(hold_rm, actual_rm);
3112                         strcpy(actual_rm, config.c_twitroom);
3113                         syslog(LOG_DEBUG, "Diverting to twit room\n");
3114                 }
3115         }
3116
3117         /* ...or if this message is destined for Aide> then go there. */
3118         if (!IsEmptyStr(force_room)) {
3119                 strcpy(actual_rm, force_room);
3120         }
3121
3122         syslog(LOG_DEBUG, "Final selection: %s\n", actual_rm);
3123         if (strcasecmp(actual_rm, CCC->room.QRname)) {
3124                 /* CtdlGetRoom(&CCC->room, actual_rm); */
3125                 CtdlUserGoto(actual_rm, 0, 1, NULL, NULL);
3126         }
3127
3128         /*
3129          * If this message has no O (room) field, generate one.
3130          */
3131         if (msg->cm_fields['O'] == NULL) {
3132                 msg->cm_fields['O'] = strdup(CCC->room.QRname);
3133         }
3134
3135         /* Perform "before save" hooks (aborting if any return nonzero) */
3136         syslog(LOG_DEBUG, "Performing before-save hooks\n");
3137         if (PerformMessageHooks(msg, EVT_BEFORESAVE) > 0) return(-3);
3138
3139         /*
3140          * If this message has an Exclusive ID, and the room is replication
3141          * checking enabled, then do replication checks.
3142          */
3143         if (DoesThisRoomNeedEuidIndexing(&CCC->room)) {
3144                 ReplicationChecks(msg);
3145         }
3146
3147         /* Save it to disk */
3148         syslog(LOG_DEBUG, "Saving to disk\n");
3149         newmsgid = send_message(msg);
3150         if (newmsgid <= 0L) return(-5);
3151
3152         /* Write a supplemental message info record.  This doesn't have to
3153          * be a critical section because nobody else knows about this message
3154          * yet.
3155          */
3156         syslog(LOG_DEBUG, "Creating MetaData record\n");
3157         memset(&smi, 0, sizeof(struct MetaData));
3158         smi.meta_msgnum = newmsgid;
3159         smi.meta_refcount = 0;
3160         safestrncpy(smi.meta_content_type, content_type,
3161                     sizeof smi.meta_content_type);
3162
3163         /*
3164          * Measure how big this message will be when rendered as RFC822.
3165          * We do this for two reasons:
3166          * 1. We need the RFC822 length for the new metadata record, so the
3167          *    POP and IMAP services don't have to calculate message lengths
3168          *    while the user is waiting (multiplied by potentially hundreds
3169          *    or thousands of messages).
3170          * 2. If journaling is enabled, we will need an RFC822 version of the
3171          *    message to attach to the journalized copy.
3172          */
3173         if (CCC->redirect_buffer != NULL) {
3174                 syslog(LOG_ALERT, "CCC->redirect_buffer is not NULL during message submission!\n");
3175                 abort();
3176         }
3177         CCC->redirect_buffer = NewStrBufPlain(NULL, SIZ);
3178         CtdlOutputPreLoadedMsg(msg, MT_RFC822, HEADERS_ALL, 0, 1, QP_EADDR);
3179         smi.meta_rfc822_length = StrLength(CCC->redirect_buffer);
3180         saved_rfc822_version = CCC->redirect_buffer;
3181         CCC->redirect_buffer = NULL;
3182
3183         PutMetaData(&smi);
3184
3185         /* Now figure out where to store the pointers */
3186         syslog(LOG_DEBUG, "Storing pointers\n");
3187
3188         /* If this is being done by the networker delivering a private
3189          * message, we want to BYPASS saving the sender's copy (because there
3190          * is no local sender; it would otherwise go to the Trashcan).
3191          */
3192         if ((!CCC->internal_pgm) || (recps == NULL)) {
3193                 if (CtdlSaveMsgPointerInRoom(actual_rm, newmsgid, 1, msg) != 0) {
3194                         syslog(LOG_ERR, "ERROR saving message pointer!\n");
3195                         CtdlSaveMsgPointerInRoom(config.c_aideroom, newmsgid, 0, msg);
3196                 }
3197         }
3198
3199         /* For internet mail, drop a copy in the outbound queue room */
3200         if ((recps != NULL) && (recps->num_internet > 0)) {
3201                 CtdlSaveMsgPointerInRoom(SMTP_SPOOLOUT_ROOM, newmsgid, 0, msg);
3202         }
3203
3204         /* If other rooms are specified, drop them there too. */
3205         if ((recps != NULL) && (recps->num_room > 0))
3206                 for (i=0; i<num_tokens(recps->recp_room, '|'); ++i) {
3207                         extract_token(recipient, recps->recp_room, i,
3208                                       '|', sizeof recipient);
3209                         syslog(LOG_DEBUG, "Delivering to room <%s>\n", recipient);
3210                         CtdlSaveMsgPointerInRoom(recipient, newmsgid, 0, msg);
3211                 }
3212
3213         /* Bump this user's messages posted counter. */
3214         syslog(LOG_DEBUG, "Updating user\n");
3215         CtdlGetUserLock(&CCC->user, CCC->curr_user);
3216         CCC->user.posted = CCC->user.posted + 1;
3217         CtdlPutUserLock(&CCC->user);
3218
3219         /* Decide where bounces need to be delivered */
3220         if ((recps != NULL) && (recps->bounce_to != NULL)) {
3221                 safestrncpy(bounce_to, recps->bounce_to, sizeof bounce_to);
3222         }
3223         else if (CCC->logged_in) {
3224                 snprintf(bounce_to, sizeof bounce_to, "%s@%s", CCC->user.fullname, config.c_nodename);
3225         }
3226         else {
3227                 snprintf(bounce_to, sizeof bounce_to, "%s@%s", msg->cm_fields['A'], msg->cm_fields['N']);
3228         }
3229
3230         /* If this is private, local mail, make a copy in the
3231          * recipient's mailbox and bump the reference count.
3232          */
3233         if ((recps != NULL) && (recps->num_local > 0))
3234                 for (i=0; i<num_tokens(recps->recp_local, '|'); ++i) {
3235                         extract_token(recipient, recps->recp_local, i,
3236                                       '|', sizeof recipient);
3237                         syslog(LOG_DEBUG, "Delivering private local mail to <%s>\n",
3238                                recipient);
3239                         if (CtdlGetUser(&userbuf, recipient) == 0) {
3240                                 CtdlMailboxName(actual_rm, sizeof actual_rm, &userbuf, MAILROOM);
3241                                 CtdlSaveMsgPointerInRoom(actual_rm, newmsgid, 0, msg);
3242                                 CtdlBumpNewMailCounter(userbuf.usernum);
3243                                 if (!IsEmptyStr(config.c_funambol_host) || !IsEmptyStr(config.c_pager_program)) {
3244                                         /* Generate a instruction message for the Funambol notification
3245                                          * server, in the same style as the SMTP queue
3246                                          */
3247                                         instr_alloc = 1024;
3248                                         instr = malloc(instr_alloc);
3249                                         snprintf(instr, instr_alloc,
3250                                                  "Content-type: %s\n\nmsgid|%ld\nsubmitted|%ld\n"
3251                                                  "bounceto|%s\n",
3252                                                  SPOOLMIME, newmsgid, (long)time(NULL),
3253                                                  bounce_to
3254                                                 );
3255
3256                                         imsg = malloc(sizeof(struct CtdlMessage));
3257                                         memset(imsg, 0, sizeof(struct CtdlMessage));
3258                                         imsg->cm_magic = CTDLMESSAGE_MAGIC;
3259                                         imsg->cm_anon_type = MES_NORMAL;
3260                                         imsg->cm_format_type = FMT_RFC822;
3261                                         imsg->cm_fields['A'] = strdup("Citadel");
3262                                         imsg->cm_fields['J'] = strdup("do not journal");
3263                                         imsg->cm_fields['M'] = instr;   /* imsg owns this memory now */
3264                                         imsg->cm_fields['2'] = strdup(recipient);
3265                                         CtdlSubmitMsg(imsg, NULL, FNBL_QUEUE_ROOM, 0);
3266                                         CtdlFreeMessage(imsg);
3267                                 }
3268                         }
3269                         else {
3270                                 syslog(LOG_DEBUG, "No user <%s>\n", recipient);
3271                                 CtdlSaveMsgPointerInRoom(config.c_aideroom, newmsgid, 0, msg);
3272                         }
3273                 }
3274
3275         /* Perform "after save" hooks */
3276         syslog(LOG_DEBUG, "Performing after-save hooks\n");
3277         if (msg->cm_fields['3'] != NULL) free(msg->cm_fields['3']);
3278         msg->cm_fields['3'] = malloc(20);
3279         snprintf(msg->cm_fields['3'], 20, "%ld", newmsgid);
3280         PerformMessageHooks(msg, EVT_AFTERSAVE);
3281         free(msg->cm_fields['3']);
3282         msg->cm_fields['3'] = NULL;
3283
3284         /* For IGnet mail, we have to save a new copy into the spooler for
3285          * each recipient, with the R and D fields set to the recipient and
3286          * destination-node.  This has two ugly side effects: all other
3287          * recipients end up being unlisted in this recipient's copy of the
3288          * message, and it has to deliver multiple messages to the same
3289          * node.  We'll revisit this again in a year or so when everyone has
3290          * a network spool receiver that can handle the new style messages.
3291          */
3292         if ((recps != NULL) && (recps->num_ignet > 0))
3293                 for (i=0; i<num_tokens(recps->recp_ignet, '|'); ++i) {
3294                         extract_token(recipient, recps->recp_ignet, i,
3295                                       '|', sizeof recipient);
3296
3297                         hold_R = msg->cm_fields['R'];
3298                         hold_D = msg->cm_fields['D'];
3299                         msg->cm_fields['R'] = malloc(SIZ);
3300                         msg->cm_fields['D'] = malloc(128);
3301                         extract_token(msg->cm_fields['R'], recipient, 0, '@', SIZ);
3302                         extract_token(msg->cm_fields['D'], recipient, 1, '@', 128);
3303
3304                         serialize_message(&smr, msg);
3305                         if (smr.len > 0) {
3306                                 snprintf(submit_filename, sizeof submit_filename,
3307                                          "%s/netmail.%04lx.%04x.%04x",
3308                                          ctdl_netin_dir,
3309                                          (long) getpid(), CCC->cs_pid, ++seqnum);
3310                                 network_fp = fopen(submit_filename, "wb+");
3311                                 if (network_fp != NULL) {
3312                                         rv = fwrite(smr.ser, smr.len, 1, network_fp);
3313                                         if (rv == -1) {
3314                                                 syslog(LOG_EMERG, "CtdlSubmitMsg(): Couldn't write network spool file: %s\n",
3315                                                        strerror(errno));
3316                                         }
3317                                         fclose(network_fp);
3318                                 }
3319                                 free(smr.ser);
3320                         }
3321
3322                         free(msg->cm_fields['R']);
3323                         free(msg->cm_fields['D']);
3324                         msg->cm_fields['R'] = hold_R;
3325                         msg->cm_fields['D'] = hold_D;
3326                 }
3327
3328         /* Go back to the room we started from */
3329         syslog(LOG_DEBUG, "Returning to original room %s\n", hold_rm);
3330         if (strcasecmp(hold_rm, CCC->room.QRname))
3331                 CtdlUserGoto(hold_rm, 0, 1, NULL, NULL);
3332
3333         /* For internet mail, generate delivery instructions.
3334          * Yes, this is recursive.  Deal with it.  Infinite recursion does
3335          * not happen because the delivery instructions message does not
3336          * contain a recipient.
3337          */
3338         if ((recps != NULL) && (recps->num_internet > 0)) {
3339                 syslog(LOG_DEBUG, "Generating delivery instructions\n");
3340                 instr_alloc = 1024;
3341                 instr = malloc(instr_alloc);
3342                 snprintf(instr, instr_alloc,
3343                          "Content-type: %s\n\nmsgid|%ld\nsubmitted|%ld\n"
3344                          "bounceto|%s\n",
3345                          SPOOLMIME, newmsgid, (long)time(NULL),
3346                          bounce_to
3347                         );
3348
3349                 if (recps->envelope_from != NULL) {
3350                         tmp = strlen(instr);
3351                         snprintf(&instr[tmp], instr_alloc-tmp, "envelope_from|%s\n", recps->envelope_from);
3352                 }
3353
3354                 for (i=0; i<num_tokens(recps->recp_internet, '|'); ++i) {
3355                         tmp = strlen(instr);
3356                         extract_token(recipient, recps->recp_internet, i, '|', sizeof recipient);
3357                         if ((tmp + strlen(recipient) + 32) > instr_alloc) {
3358                                 instr_alloc = instr_alloc * 2;
3359                                 instr = realloc(instr, instr_alloc);
3360                         }
3361                         snprintf(&instr[tmp], instr_alloc - tmp, "remote|%s|0||\n", recipient);
3362                 }
3363
3364                 imsg = malloc(sizeof(struct CtdlMessage));
3365                 memset(imsg, 0, sizeof(struct CtdlMessage));
3366                 imsg->cm_magic = CTDLMESSAGE_MAGIC;
3367                 imsg->cm_anon_type = MES_NORMAL;
3368                 imsg->cm_format_type = FMT_RFC822;
3369                 imsg->cm_fields['A'] = strdup("Citadel");
3370                 imsg->cm_fields['J'] = strdup("do not journal");
3371                 imsg->cm_fields['M'] = instr;   /* imsg owns this memory now */
3372                 CtdlSubmitMsg(imsg, NULL, SMTP_SPOOLOUT_ROOM, QP_EADDR);
3373                 CtdlFreeMessage(imsg);
3374         }
3375
3376         /*
3377          * Any addresses to harvest for someone's address book?
3378          */
3379         if ( (CCC->logged_in) && (recps != NULL) ) {
3380                 collected_addresses = harvest_collected_addresses(msg);
3381         }
3382
3383         if (collected_addresses != NULL) {
3384                 aptr = (struct addresses_to_be_filed *)
3385                         malloc(sizeof(struct addresses_to_be_filed));
3386                 CtdlMailboxName(actual_rm, sizeof actual_rm,
3387                                 &CCC->user, USERCONTACTSROOM);
3388                 aptr->roomname = strdup(actual_rm);
3389                 aptr->collected_addresses = collected_addresses;
3390                 begin_critical_section(S_ATBF);
3391                 aptr->next = atbf;
3392                 atbf = aptr;
3393                 end_critical_section(S_ATBF);
3394         }
3395
3396         /*
3397          * Determine whether this message qualifies for journaling.
3398          */
3399         if (msg->cm_fields['J'] != NULL) {
3400                 qualified_for_journaling = 0;
3401         }
3402         else {
3403                 if (recps == NULL) {
3404                         qualified_for_journaling = config.c_journal_pubmsgs;
3405                 }
3406                 else if (recps->num_local + recps->num_ignet + recps->num_internet > 0) {
3407                         qualified_for_journaling = config.c_journal_email;
3408                 }
3409                 else {
3410                         qualified_for_journaling = config.c_journal_pubmsgs;
3411                 }
3412         }
3413
3414         /*
3415          * Do we have to perform journaling?  If so, hand off the saved
3416          * RFC822 version will be handed off to the journaler for background
3417          * submit.  Otherwise, we have to free the memory ourselves.
3418          */
3419         if (saved_rfc822_version != NULL) {
3420                 if (qualified_for_journaling) {
3421                         JournalBackgroundSubmit(msg, saved_rfc822_version, recps);
3422                 }
3423                 else {
3424                         FreeStrBuf(&saved_rfc822_version);
3425                 }
3426         }
3427
3428         /* Done. */
3429         return(newmsgid);
3430 }
3431
3432
3433
3434 void aide_message (char *text, char *subject)
3435 {
3436         quickie_message("Citadel",NULL,NULL,AIDEROOM,text,FMT_CITADEL,subject);
3437 }
3438
3439
3440 /*
3441  * Convenience function for generating small administrative messages.
3442  */
3443 void quickie_message(const char *from, const char *fromaddr, char *to, char *room, const char *text,
3444                      int format_type, const char *subject)
3445 {
3446         struct CtdlMessage *msg;
3447         struct recptypes *recp = NULL;
3448
3449         msg = malloc(sizeof(struct CtdlMessage));
3450         memset(msg, 0, sizeof(struct CtdlMessage));
3451         msg->cm_magic = CTDLMESSAGE_MAGIC;
3452         msg->cm_anon_type = MES_NORMAL;
3453         msg->cm_format_type = format_type;
3454
3455         if (from != NULL) {
3456                 msg->cm_fields['A'] = strdup(from);
3457         }
3458         else if (fromaddr != NULL) {
3459                 msg->cm_fields['A'] = strdup(fromaddr);
3460                 if (strchr(msg->cm_fields['A'], '@')) {
3461                         *strchr(msg->cm_fields['A'], '@') = 0;
3462                 }
3463         }
3464         else {
3465                 msg->cm_fields['A'] = strdup("Citadel");
3466         }
3467
3468         if (fromaddr != NULL) msg->cm_fields['F'] = strdup(fromaddr);
3469         if (room != NULL) msg->cm_fields['O'] = strdup(room);
3470         msg->cm_fields['N'] = strdup(NODENAME);
3471         if (to != NULL) {
3472                 msg->cm_fields['R'] = strdup(to);
3473                 recp = validate_recipients(to, NULL, 0);
3474         }
3475         if (subject != NULL) {
3476                 msg->cm_fields['U'] = strdup(subject);
3477         }
3478         msg->cm_fields['M'] = strdup(text);
3479
3480         CtdlSubmitMsg(msg, recp, room, 0);
3481         CtdlFreeMessage(msg);
3482         if (recp != NULL) free_recipients(recp);
3483 }
3484
3485
3486
3487 /*
3488  * Back end function used by CtdlMakeMessage() and similar functions
3489  */
3490 StrBuf *CtdlReadMessageBodyBuf(char *terminator,        /* token signalling EOT */
3491                                long tlen,
3492                                size_t maxlen,           /* maximum message length */
3493                                char *exist,             /* if non-null, append to it;
3494                                                            exist is ALWAYS freed  */
3495                                int crlf,                /* CRLF newlines instead of LF */
3496                                int *sock                /* socket handle or 0 for this session's client socket */
3497         )
3498 {
3499         StrBuf *Message;
3500         StrBuf *LineBuf;
3501         int flushing = 0;
3502         int finished = 0;
3503         int dotdot = 0;
3504
3505         LineBuf = NewStrBufPlain(NULL, SIZ);
3506         if (exist == NULL) {
3507                 Message = NewStrBufPlain(NULL, 4 * SIZ);
3508         }
3509         else {
3510                 Message = NewStrBufPlain(exist, -1);
3511                 free(exist);
3512         }
3513
3514         /* Do we need to change leading ".." to "." for SMTP escaping? */
3515         if ((tlen == 1) && (*terminator == '.')) {
3516                 dotdot = 1;
3517         }
3518
3519         /* read in the lines of message text one by one */
3520         do {
3521                 if (sock != NULL) {
3522                         if ((CtdlSockGetLine(sock, LineBuf, 5) < 0) ||
3523                             (*sock == -1))
3524                                 finished = 1;
3525                 }
3526                 else {
3527                         if (CtdlClientGetLine(LineBuf) < 0) finished = 1;
3528                 }
3529                 if ((StrLength(LineBuf) == tlen) &&
3530                     (!strcmp(ChrPtr(LineBuf), terminator)))
3531                         finished = 1;
3532
3533                 if ( (!flushing) && (!finished) ) {
3534                         if (crlf) {
3535                                 StrBufAppendBufPlain(LineBuf, HKEY("\r\n"), 0);
3536                         }
3537                         else {
3538                                 StrBufAppendBufPlain(LineBuf, HKEY("\n"), 0);
3539                         }
3540
3541                         /* Unescape SMTP-style input of two dots at the beginning of the line */
3542                         if ((dotdot) &&
3543                             (StrLength(LineBuf) == 2) &&
3544                             (!strcmp(ChrPtr(LineBuf), "..")))
3545                         {
3546                                 StrBufCutLeft(LineBuf, 1);
3547                         }
3548
3549                         StrBufAppendBuf(Message, LineBuf, 0);
3550                 }
3551
3552                 /* if we've hit the max msg length, flush the rest */
3553                 if (StrLength(Message) >= maxlen) flushing = 1;
3554
3555         } while (!finished);
3556         FreeStrBuf(&LineBuf);
3557         return Message;
3558 }
3559
3560 void DeleteAsyncMsg(ReadAsyncMsg **Msg)
3561 {
3562         if (*Msg == NULL)
3563                 return;
3564         FreeStrBuf(&(*Msg)->MsgBuf);
3565
3566         free(*Msg);
3567         *Msg = NULL;
3568 }
3569
3570 ReadAsyncMsg *NewAsyncMsg(const char *terminator,       /* token signalling EOT */
3571                           long tlen,
3572                           size_t maxlen,                /* maximum message length */
3573                           size_t expectlen,             /* if we expect a message, how long should it be? */
3574                           char *exist,                  /* if non-null, append to it;
3575                                                            exist is ALWAYS freed  */
3576                           long eLen,                    /* length of exist */
3577                           int crlf                      /* CRLF newlines instead of LF */
3578         )
3579 {
3580         ReadAsyncMsg *NewMsg;
3581
3582         NewMsg = (ReadAsyncMsg *)malloc(sizeof(ReadAsyncMsg));
3583         memset(NewMsg, 0, sizeof(ReadAsyncMsg));
3584
3585         if (exist == NULL) {
3586                 long len;
3587
3588                 if (expectlen == 0) {
3589                         len = 4 * SIZ;
3590                 }
3591                 else {
3592                         len = expectlen + 10;
3593                 }
3594                 NewMsg->MsgBuf = NewStrBufPlain(NULL, len);
3595         }
3596         else {
3597                 NewMsg->MsgBuf = NewStrBufPlain(exist, eLen);
3598                 free(exist);
3599         }
3600         /* Do we need to change leading ".." to "." for SMTP escaping? */
3601         if ((tlen == 1) && (*terminator == '.')) {
3602                 NewMsg->dodot = 1;
3603         }
3604
3605         NewMsg->terminator = terminator;
3606         NewMsg->tlen = tlen;
3607
3608         NewMsg->maxlen = maxlen;
3609
3610         NewMsg->crlf = crlf;
3611
3612         return NewMsg;
3613 }
3614
3615 /*
3616  * Back end function used by CtdlMakeMessage() and similar functions
3617  */
3618 eReadState CtdlReadMessageBodyAsync(AsyncIO *IO)
3619 {
3620         ReadAsyncMsg *ReadMsg;
3621         int MsgFinished = 0;
3622         eReadState Finished = eMustReadMore;
3623
3624 #ifdef BIGBAD_IODBG
3625         char fn [SIZ];
3626         FILE *fd;
3627         const char *pch = ChrPtr(IO->SendBuf.Buf);
3628         const char *pchh = IO->SendBuf.ReadWritePointer;
3629         long nbytes;
3630
3631         if (pchh == NULL)
3632                 pchh = pch;
3633
3634         nbytes = StrLength(IO->SendBuf.Buf) - (pchh - pch);
3635         snprintf(fn, SIZ, "/tmp/foolog_ev_%s.%d",
3636                  ((CitContext*)(IO->CitContext))->ServiceName,
3637                  IO->SendBuf.fd);
3638
3639         fd = fopen(fn, "a+");
3640 #endif
3641
3642         ReadMsg = IO->ReadMsg;
3643
3644         /* read in the lines of message text one by one */
3645         do {
3646                 Finished = StrBufChunkSipLine(IO->IOBuf, &IO->RecvBuf);
3647
3648                 switch (Finished) {
3649                 case eMustReadMore: /// read new from socket...
3650 #ifdef BIGBAD_IODBG
3651                         if (IO->RecvBuf.ReadWritePointer != NULL) {
3652                                 nbytes = StrLength(IO->RecvBuf.Buf) - (IO->RecvBuf.ReadWritePointer - ChrPtr(IO->RecvBuf.Buf));
3653                                 fprintf(fd, "Read; Line unfinished: %ld Bytes still in buffer [", nbytes);
3654
3655                                 fwrite(IO->RecvBuf.ReadWritePointer, nbytes, 1, fd);
3656
3657                                 fprintf(fd, "]\n");
3658                         } else {
3659                                 fprintf(fd, "BufferEmpty! \n");
3660                         }
3661                         fclose(fd);
3662 #endif
3663                         return Finished;
3664                     break;
3665                 case eBufferNotEmpty: /* shouldn't happen... */
3666                 case eReadSuccess: /// done for now...
3667                     break;
3668                 case eReadFail: /// WHUT?
3669                     ///todo: shut down!
3670                         break;
3671                 }
3672
3673
3674                 if ((StrLength(IO->IOBuf) == ReadMsg->tlen) &&
3675                     (!strcmp(ChrPtr(IO->IOBuf), ReadMsg->terminator))) {
3676                         MsgFinished = 1;
3677 #ifdef BIGBAD_IODBG
3678                         fprintf(fd, "found Terminator; Message Size: %d\n", StrLength(ReadMsg->MsgBuf));
3679 #endif
3680                 }
3681                 else if (!ReadMsg->flushing) {
3682
3683 #ifdef BIGBAD_IODBG
3684                         fprintf(fd, "Read Line: [%d][%s]\n", StrLength(IO->IOBuf), ChrPtr(IO->IOBuf));
3685 #endif
3686
3687                         /* Unescape SMTP-style input of two dots at the beginning of the line */
3688                         if ((ReadMsg->dodot) &&
3689                             (StrLength(IO->IOBuf) == 2) &&  /* TODO: do we just unescape lines with two dots or any line? */
3690                             (!strcmp(ChrPtr(IO->IOBuf), "..")))
3691                         {
3692 #ifdef BIGBAD_IODBG
3693                                 fprintf(fd, "UnEscaped!\n");
3694 #endif
3695                                 StrBufCutLeft(IO->IOBuf, 1);
3696                         }
3697
3698                         if (ReadMsg->crlf) {
3699                                 StrBufAppendBufPlain(IO->IOBuf, HKEY("\r\n"), 0);
3700                         }
3701                         else {
3702                                 StrBufAppendBufPlain(IO->IOBuf, HKEY("\n"), 0);
3703                         }
3704
3705                         StrBufAppendBuf(ReadMsg->MsgBuf, IO->IOBuf, 0);
3706                 }
3707
3708                 /* if we've hit the max msg length, flush the rest */
3709                 if (StrLength(ReadMsg->MsgBuf) >= ReadMsg->maxlen) ReadMsg->flushing = 1;
3710
3711         } while (!MsgFinished);
3712
3713 #ifdef BIGBAD_IODBG
3714         fprintf(fd, "Done with reading; %s.\n, ",
3715                 (MsgFinished)?"Message Finished": "FAILED");
3716         fclose(fd);
3717 #endif
3718         if (MsgFinished)
3719                 return eReadSuccess;
3720         else
3721                 return eAbort;
3722 }
3723
3724
3725 /*
3726  * Back end function used by CtdlMakeMessage() and similar functions
3727  */
3728 char *CtdlReadMessageBody(char *terminator,     /* token signalling EOT */
3729                           long tlen,
3730                           size_t maxlen,                /* maximum message length */
3731                           char *exist,          /* if non-null, append to it;
3732                                                    exist is ALWAYS freed  */
3733                           int crlf,             /* CRLF newlines instead of LF */
3734                           int *sock             /* socket handle or 0 for this session's client socket */
3735         )
3736 {
3737         StrBuf *Message;
3738
3739         Message = CtdlReadMessageBodyBuf(terminator,
3740                                          tlen,
3741                                          maxlen,
3742                                          exist,
3743                                          crlf,
3744                                          sock);
3745         if (Message == NULL)
3746                 return NULL;
3747         else
3748                 return SmashStrBuf(&Message);
3749 }
3750
3751
3752 /*
3753  * Build a binary message to be saved on disk.
3754  * (NOTE: if you supply 'preformatted_text', the buffer you give it
3755  * will become part of the message.  This means you are no longer
3756  * responsible for managing that memory -- it will be freed along with
3757  * the rest of the fields when CtdlFreeMessage() is called.)
3758  */
3759
3760 struct CtdlMessage *CtdlMakeMessage(
3761         struct ctdluser *author,        /* author's user structure */
3762         char *recipient,                /* NULL if it's not mail */
3763         char *recp_cc,                  /* NULL if it's not mail */
3764         char *room,                     /* room where it's going */
3765         int type,                       /* see MES_ types in header file */
3766         int format_type,                /* variformat, plain text, MIME... */
3767         char *fake_name,                /* who we're masquerading as */
3768         char *my_email,                 /* which of my email addresses to use (empty is ok) */
3769         char *subject,                  /* Subject (optional) */
3770         char *supplied_euid,            /* ...or NULL if this is irrelevant */
3771         char *preformatted_text,        /* ...or NULL to read text from client */
3772         char *references                /* Thread references */
3773         ) {
3774         char dest_node[256];
3775         char buf[1024];
3776         struct CtdlMessage *msg;
3777         StrBuf *FakeAuthor;
3778         StrBuf *FakeEncAuthor = NULL;
3779
3780         msg = malloc(sizeof(struct CtdlMessage));
3781         memset(msg, 0, sizeof(struct CtdlMessage));
3782         msg->cm_magic = CTDLMESSAGE_MAGIC;
3783         msg->cm_anon_type = type;
3784         msg->cm_format_type = format_type;
3785
3786         /* Don't confuse the poor folks if it's not routed mail. */
3787         strcpy(dest_node, "");
3788
3789         if (recipient != NULL) striplt(recipient);
3790         if (recp_cc != NULL) striplt(recp_cc);
3791
3792         /* Path or Return-Path */
3793         if (my_email == NULL) my_email = "";
3794
3795         if (!IsEmptyStr(my_email)) {
3796                 msg->cm_fields['P'] = strdup(my_email);
3797         }
3798         else {
3799                 snprintf(buf, sizeof buf, "%s", author->fullname);
3800                 msg->cm_fields['P'] = strdup(buf);
3801         }
3802         convert_spaces_to_underscores(msg->cm_fields['P']);
3803
3804         snprintf(buf, sizeof buf, "%ld", (long)time(NULL));     /* timestamp */
3805         msg->cm_fields['T'] = strdup(buf);
3806
3807         if ((fake_name != NULL) && (fake_name[0])) {            /* author */
3808                 FakeAuthor = NewStrBufPlain (fake_name, -1);
3809         }
3810         else {
3811                 FakeAuthor = NewStrBufPlain (author->fullname, -1);
3812         }
3813         StrBufRFC2047encode(&FakeEncAuthor, FakeAuthor);
3814         msg->cm_fields['A'] = SmashStrBuf(&FakeEncAuthor);
3815         FreeStrBuf(&FakeAuthor);
3816
3817         if (CC->room.QRflags & QR_MAILBOX) {            /* room */
3818                 msg->cm_fields['O'] = strdup(&CC->room.QRname[11]);
3819         }
3820         else {
3821                 msg->cm_fields['O'] = strdup(CC->room.QRname);
3822         }
3823
3824         msg->cm_fields['N'] = strdup(NODENAME);         /* nodename */
3825         msg->cm_fields['H'] = strdup(HUMANNODE);                /* hnodename */
3826
3827         if ((recipient != NULL) && (recipient[0] != 0)) {
3828                 msg->cm_fields['R'] = strdup(recipient);
3829         }
3830         if ((recp_cc != NULL) && (recp_cc[0] != 0)) {
3831                 msg->cm_fields['Y'] = strdup(recp_cc);
3832         }
3833         if (dest_node[0] != 0) {
3834                 msg->cm_fields['D'] = strdup(dest_node);
3835         }
3836
3837         if (!IsEmptyStr(my_email)) {
3838                 msg->cm_fields['F'] = strdup(my_email);
3839         }
3840         else if ( (author == &CC->user) && (!IsEmptyStr(CC->cs_inet_email)) ) {
3841                 msg->cm_fields['F'] = strdup(CC->cs_inet_email);
3842         }
3843
3844         if (subject != NULL) {
3845                 long length;
3846                 striplt(subject);
3847                 length = strlen(subject);
3848                 if (length > 0) {
3849                         long i;
3850                         long IsAscii;
3851                         IsAscii = -1;
3852                         i = 0;
3853                         while ((subject[i] != '\0') &&
3854                                (IsAscii = isascii(subject[i]) != 0 ))
3855                                 i++;
3856                         if (IsAscii != 0)
3857                                 msg->cm_fields['U'] = strdup(subject);
3858                         else /* ok, we've got utf8 in the string. */
3859                         {
3860                                 msg->cm_fields['U'] = rfc2047encode(subject, length);
3861                         }
3862
3863                 }
3864         }
3865
3866         if (supplied_euid != NULL) {
3867                 msg->cm_fields['E'] = strdup(supplied_euid);
3868         }
3869
3870         if ((references != NULL) && (!IsEmptyStr(references))) {
3871                 if (msg->cm_fields['W'] != NULL)
3872                         free(msg->cm_fields['W']);
3873                 msg->cm_fields['W'] = strdup(references);
3874         }
3875
3876         if (preformatted_text != NULL) {
3877                 msg->cm_fields['M'] = preformatted_text;
3878         }
3879         else {
3880                 msg->cm_fields['M'] = CtdlReadMessageBody(HKEY("000"), config.c_maxmsglen, NULL, 0, 0);
3881         }
3882
3883         return(msg);
3884 }
3885
3886 extern int netconfig_check_roomaccess(
3887         char *errmsgbuf,
3888         size_t n,
3889         const char* RemoteIdentifier); /* TODO: find a smarter way */
3890
3891 /*
3892  * Check to see whether we have permission to post a message in the current
3893  * room.  Returns a *CITADEL ERROR CODE* and puts a message in errmsgbuf, or
3894  * returns 0 on success.
3895  */
3896 int CtdlDoIHavePermissionToPostInThisRoom(
3897         char *errmsgbuf,
3898         size_t n,
3899         const char* RemoteIdentifier,
3900         int PostPublic,
3901         int is_reply
3902         ) {
3903         int ra;
3904
3905         if (!(CC->logged_in) &&
3906             (PostPublic == POST_LOGGED_IN)) {
3907                 snprintf(errmsgbuf, n, "Not logged in.");
3908                 return (ERROR + NOT_LOGGED_IN);
3909         }
3910         else if (PostPublic == CHECK_EXISTANCE) {
3911                 return (0); // We're Evaling whether a recipient exists
3912         }
3913         else if (!(CC->logged_in)) {
3914
3915                 if ((CC->room.QRflags & QR_READONLY)) {
3916                         snprintf(errmsgbuf, n, "Not logged in.");
3917                         return (ERROR + NOT_LOGGED_IN);
3918                 }
3919                 if (CC->room.QRflags2 & QR2_MODERATED) {
3920                         snprintf(errmsgbuf, n, "Not logged in Moderation feature not yet implemented!");
3921                         return (ERROR + NOT_LOGGED_IN);
3922                 }
3923                 if ((PostPublic!=POST_LMTP) &&(CC->room.QRflags2 & QR2_SMTP_PUBLIC) == 0) {
3924
3925                         return netconfig_check_roomaccess(errmsgbuf, n, RemoteIdentifier);
3926                 }
3927                 return (0);
3928
3929         }
3930
3931         if ((CC->user.axlevel < AxProbU)
3932             && ((CC->room.QRflags & QR_MAILBOX) == 0)) {
3933                 snprintf(errmsgbuf, n, "Need to be validated to enter (except in %s> to sysop)", MAILROOM);
3934                 return (ERROR + HIGHER_ACCESS_REQUIRED);
3935         }
3936
3937         CtdlRoomAccess(&CC->room, &CC->user, &ra, NULL);
3938
3939         if (ra & UA_POSTALLOWED) {
3940                 strcpy(errmsgbuf, "OK to post or reply here");
3941                 return(0);
3942         }
3943
3944         if ( (ra & UA_REPLYALLOWED) && (is_reply) ) {
3945                 /*
3946                  * To be thorough, we ought to check to see if the message they are
3947                  * replying to is actually a valid one in this room, but unless this
3948                  * actually becomes a problem we'll go with high performance instead.
3949                  */
3950                 strcpy(errmsgbuf, "OK to reply here");
3951                 return(0);
3952         }
3953
3954         if ( (ra & UA_REPLYALLOWED) && (!is_reply) ) {
3955                 /* Clarify what happened with a better error message */
3956                 snprintf(errmsgbuf, n, "You may only reply to existing messages here.");
3957                 return (ERROR + HIGHER_ACCESS_REQUIRED);
3958         }
3959
3960         snprintf(errmsgbuf, n, "Higher access is required to post in this room.");
3961         return (ERROR + HIGHER_ACCESS_REQUIRED);
3962
3963 }
3964
3965
3966 /*
3967  * Check to see if the specified user has Internet mail permission
3968  * (returns nonzero if permission is granted)
3969  */
3970 int CtdlCheckInternetMailPermission(struct ctdluser *who) {
3971
3972         /* Do not allow twits to send Internet mail */
3973         if (who->axlevel <= AxProbU) return(0);
3974
3975         /* Globally enabled? */
3976         if (config.c_restrict == 0) return(1);
3977
3978         /* User flagged ok? */
3979         if (who->flags & US_INTERNET) return(2);
3980
3981         /* Aide level access? */
3982         if (who->axlevel >= AxAideU) return(3);
3983
3984         /* No mail for you! */
3985         return(0);
3986 }
3987
3988
3989 /*
3990  * Validate recipients, count delivery types and errors, and handle aliasing
3991  * FIXME check for dupes!!!!!
3992  *
3993  * Returns 0 if all addresses are ok, ret->num_error = -1 if no addresses
3994  * were specified, or the number of addresses found invalid.
3995  *
3996  * Caller needs to free the result using free_recipients()
3997  */
3998 struct recptypes *validate_recipients(const char *supplied_recipients,
3999                                       const char *RemoteIdentifier,
4000                                       int Flags) {
4001         struct recptypes *ret;
4002         char *recipients = NULL;
4003         char this_recp[256];
4004         char this_recp_cooked[256];
4005         char append[SIZ];
4006         int num_recps = 0;
4007         int i, j;
4008         int mailtype;
4009         int invalid;
4010         struct ctdluser tempUS;
4011         struct ctdlroom tempQR;
4012         struct ctdlroom tempQR2;
4013         int err = 0;
4014         char errmsg[SIZ];
4015         int in_quotes = 0;
4016
4017         /* Initialize */
4018         ret = (struct recptypes *) malloc(sizeof(struct recptypes));
4019         if (ret == NULL) return(NULL);
4020
4021         /* Set all strings to null and numeric values to zero */
4022         memset(ret, 0, sizeof(struct recptypes));
4023
4024         if (supplied_recipients == NULL) {
4025                 recipients = strdup("");
4026         }
4027         else {
4028                 recipients = strdup(supplied_recipients);
4029         }
4030
4031         /* Allocate some memory.  Yes, this allocates 500% more memory than we will
4032          * actually need, but it's healthier for the heap than doing lots of tiny
4033          * realloc() calls instead.
4034          */
4035
4036         ret->errormsg = malloc(strlen(recipients) + 1024);
4037         ret->recp_local = malloc(strlen(recipients) + 1024);
4038         ret->recp_internet = malloc(strlen(recipients) + 1024);
4039         ret->recp_ignet = malloc(strlen(recipients) + 1024);
4040         ret->recp_room = malloc(strlen(recipients) + 1024);
4041         ret->display_recp = malloc(strlen(recipients) + 1024);
4042
4043         ret->errormsg[0] = 0;
4044         ret->recp_local[0] = 0;
4045         ret->recp_internet[0] = 0;
4046         ret->recp_ignet[0] = 0;
4047         ret->recp_room[0] = 0;
4048         ret->display_recp[0] = 0;
4049
4050         ret->recptypes_magic = RECPTYPES_MAGIC;
4051
4052         /* Change all valid separator characters to commas */
4053         for (i=0; !IsEmptyStr(&recipients[i]); ++i) {
4054                 if ((recipients[i] == ';') || (recipients[i] == '|')) {
4055                         recipients[i] = ',';
4056                 }
4057         }
4058
4059         /* Now start extracting recipients... */
4060
4061         while (!IsEmptyStr(recipients)) {
4062
4063                 for (i=0; i<=strlen(recipients); ++i) {
4064                         if (recipients[i] == '\"') in_quotes = 1 - in_quotes;
4065                         if ( ( (recipients[i] == ',') && (!in_quotes) ) || (recipients[i] == 0) ) {
4066                                 safestrncpy(this_recp, recipients, i+1);
4067                                 this_recp[i] = 0;
4068                                 if (recipients[i] == ',') {
4069                                         strcpy(recipients, &recipients[i+1]);
4070                                 }
4071                                 else {
4072                                         strcpy(recipients, "");
4073                                 }
4074                                 break;
4075                         }
4076                 }
4077
4078                 striplt(this_recp);
4079                 if (IsEmptyStr(this_recp))
4080                         break;
4081                 syslog(LOG_DEBUG, "Evaluating recipient #%d: %s\n", num_recps, this_recp);
4082                 ++num_recps;
4083                 mailtype = alias(this_recp);
4084                 mailtype = alias(this_recp);
4085                 mailtype = alias(this_recp);
4086                 j = 0;
4087                 for (j=0; !IsEmptyStr(&this_recp[j]); ++j) {
4088                         if (this_recp[j]=='_') {
4089                                 this_recp_cooked[j] = ' ';
4090                         }
4091                         else {
4092                                 this_recp_cooked[j] = this_recp[j];
4093                         }
4094                 }
4095                 this_recp_cooked[j] = '\0';
4096                 invalid = 0;
4097                 errmsg[0] = 0;
4098                 switch(mailtype) {
4099                 case MES_LOCAL:
4100                         if (!strcasecmp(this_recp, "sysop")) {
4101                                 ++ret->num_room;
4102                                 strcpy(this_recp, config.c_aideroom);
4103                                 if (!IsEmptyStr(ret->recp_room)) {
4104                                         strcat(ret->recp_room, "|");
4105                                 }
4106                                 strcat(ret->recp_room, this_recp);
4107                         }
4108                         else if ( (!strncasecmp(this_recp, "room_", 5))
4109                                   && (!CtdlGetRoom(&tempQR, &this_recp_cooked[5])) ) {
4110
4111                                 /* Save room so we can restore it later */
4112                                 tempQR2 = CC->room;
4113                                 CC->room = tempQR;
4114
4115                                 /* Check permissions to send mail to this room */
4116                                 err = CtdlDoIHavePermissionToPostInThisRoom(
4117                                         errmsg,
4118                                         sizeof errmsg,
4119                                         RemoteIdentifier,
4120                                         Flags,
4121                                         0                       /* 0 = not a reply */
4122                                         );
4123                                 if (err)
4124                                 {
4125                                         ++ret->num_error;
4126                                         invalid = 1;
4127                                 }
4128                                 else {
4129                                         ++ret->num_room;
4130                                         if (!IsEmptyStr(ret->recp_room)) {
4131                                                 strcat(ret->recp_room, "|");
4132                                         }
4133                                         strcat(ret->recp_room, &this_recp_cooked[5]);
4134                                 }
4135
4136                                 /* Restore room in case something needs it */
4137                                 CC->room = tempQR2;
4138
4139                         }
4140                         else if (CtdlGetUser(&tempUS, this_recp) == 0) {
4141                                 ++ret->num_local;
4142                                 strcpy(this_recp, tempUS.fullname);
4143                                 if (!IsEmptyStr(ret->recp_local)) {
4144                                         strcat(ret->recp_local, "|");
4145                                 }
4146                                 strcat(ret->recp_local, this_recp);
4147                         }
4148                         else if (CtdlGetUser(&tempUS, this_recp_cooked) == 0) {
4149                                 ++ret->num_local;
4150                                 strcpy(this_recp, tempUS.fullname);
4151                                 if (!IsEmptyStr(ret->recp_local)) {
4152                                         strcat(ret->recp_local, "|");
4153                                 }
4154                                 strcat(ret->recp_local, this_recp);
4155                         }
4156                         else {
4157                                 ++ret->num_error;
4158                                 invalid = 1;
4159                         }
4160                         break;
4161                 case MES_INTERNET:
4162                         /* Yes, you're reading this correctly: if the target
4163                          * domain points back to the local system or an attached
4164                          * Citadel directory, the address is invalid.  That's
4165                          * because if the address were valid, we would have
4166                          * already translated it to a local address by now.
4167                          */
4168                         if (IsDirectory(this_recp, 0)) {
4169                                 ++ret->num_error;
4170                                 invalid = 1;
4171                         }
4172                         else {
4173                                 ++ret->num_internet;
4174                                 if (!IsEmptyStr(ret->recp_internet)) {
4175                                         strcat(ret->recp_internet, "|");
4176                                 }
4177                                 strcat(ret->recp_internet, this_recp);
4178                         }
4179                         break;
4180                 case MES_IGNET:
4181                         ++ret->num_ignet;
4182                         if (!IsEmptyStr(ret->recp_ignet)) {
4183                                 strcat(ret->recp_ignet, "|");
4184                         }
4185                         strcat(ret->recp_ignet, this_recp);
4186                         break;
4187                 case MES_ERROR:
4188                         ++ret->num_error;
4189                         invalid = 1;
4190                         break;
4191                 }
4192                 if (invalid) {
4193                         if (IsEmptyStr(errmsg)) {
4194                                 snprintf(append, sizeof append, "Invalid recipient: %s", this_recp);
4195                         }
4196                         else {
4197                                 snprintf(append, sizeof append, "%s", errmsg);
4198                         }
4199                         if ( (strlen(ret->errormsg) + strlen(append) + 3) < SIZ) {
4200                                 if (!IsEmptyStr(ret->errormsg)) {
4201                                         strcat(ret->errormsg, "; ");
4202                                 }
4203                                 strcat(ret->errormsg, append);
4204                         }
4205                 }
4206                 else {
4207                         if (IsEmptyStr(ret->display_recp)) {
4208                                 strcpy(append, this_recp);
4209                         }
4210                         else {
4211                                 snprintf(append, sizeof append, ", %s", this_recp);
4212                         }
4213                         if ( (strlen(ret->display_recp)+strlen(append)) < SIZ) {
4214                                 strcat(ret->display_recp, append);
4215                         }
4216                 }
4217         }
4218
4219         if ((ret->num_local + ret->num_internet + ret->num_ignet +
4220              ret->num_room + ret->num_error) == 0) {
4221                 ret->num_error = (-1);
4222                 strcpy(ret->errormsg, "No recipients specified.");
4223         }
4224
4225         syslog(LOG_DEBUG, "validate_recipients()\n");
4226         syslog(LOG_DEBUG, " local: %d <%s>\n", ret->num_local, ret->recp_local);
4227         syslog(LOG_DEBUG, "  room: %d <%s>\n", ret->num_room, ret->recp_room);
4228         syslog(LOG_DEBUG, "  inet: %d <%s>\n", ret->num_internet, ret->recp_internet);
4229         syslog(LOG_DEBUG, " ignet: %d <%s>\n", ret->num_ignet, ret->recp_ignet);
4230         syslog(LOG_DEBUG, " error: %d <%s>\n", ret->num_error, ret->errormsg);
4231
4232         free(recipients);
4233         return(ret);
4234 }
4235
4236
4237 /*
4238  * Destructor for struct recptypes
4239  */
4240 void free_recipients(struct recptypes *valid) {
4241
4242         if (valid == NULL) {
4243                 return;
4244         }
4245
4246         if (valid->recptypes_magic != RECPTYPES_MAGIC) {
4247                 syslog(LOG_EMERG, "Attempt to call free_recipients() on some other data type!\n");
4248                 abort();
4249         }
4250
4251         if (valid->errormsg != NULL)            free(valid->errormsg);
4252         if (valid->recp_local != NULL)          free(valid->recp_local);
4253         if (valid->recp_internet != NULL)       free(valid->recp_internet);
4254         if (valid->recp_ignet != NULL)          free(valid->recp_ignet);
4255         if (valid->recp_room != NULL)           free(valid->recp_room);
4256         if (valid->display_recp != NULL)        free(valid->display_recp);
4257         if (valid->bounce_to != NULL)           free(valid->bounce_to);
4258         if (valid->envelope_from != NULL)       free(valid->envelope_from);
4259         free(valid);
4260 }
4261
4262
4263
4264 /*
4265  * message entry  -  mode 0 (normal)
4266  */
4267 void cmd_ent0(char *entargs)
4268 {
4269         struct CitContext *CCC = CC;
4270         int post = 0;
4271         char recp[SIZ];
4272         char cc[SIZ];
4273         char bcc[SIZ];
4274         char supplied_euid[128];
4275         int anon_flag = 0;
4276         int format_type = 0;
4277         char newusername[256];
4278         char newuseremail[256];
4279         struct CtdlMessage *msg;
4280         int anonymous = 0;
4281         char errmsg[SIZ];
4282         int err = 0;
4283         struct recptypes *valid = NULL;
4284         struct recptypes *valid_to = NULL;
4285         struct recptypes *valid_cc = NULL;
4286         struct recptypes *valid_bcc = NULL;
4287         char subject[SIZ];
4288         int subject_required = 0;
4289         int do_confirm = 0;
4290         int verbose_reply = 0;
4291         long msgnum;
4292         int i, j;
4293         char buf[256];
4294         int newuseremail_ok = 0;
4295         char references[SIZ];
4296         char *ptr;
4297
4298         unbuffer_output();
4299
4300         post = extract_int(entargs, 0);
4301         extract_token(recp, entargs, 1, '|', sizeof recp);
4302         anon_flag = extract_int(entargs, 2);
4303         format_type = extract_int(entargs, 3);
4304         extract_token(subject, entargs, 4, '|', sizeof subject);
4305         extract_token(newusername, entargs, 5, '|', sizeof newusername);
4306         do_confirm = extract_int(entargs, 6);
4307         extract_token(cc, entargs, 7, '|', sizeof cc);
4308         extract_token(bcc, entargs, 8, '|', sizeof bcc);
4309         verbose_reply = extract_int(entargs, 9);
4310         switch(CC->room.QRdefaultview) {
4311         case VIEW_NOTES:
4312         case VIEW_WIKI:
4313                 extract_token(supplied_euid, entargs, 9, '|', sizeof supplied_euid);
4314                 break;
4315         default:
4316                 supplied_euid[0] = 0;
4317                 break;
4318         }
4319         extract_token(newuseremail, entargs, 10, '|', sizeof newuseremail);
4320         extract_token(references, entargs, 11, '|', sizeof references);
4321         for (ptr=references; *ptr != 0; ++ptr) {
4322                 if (*ptr == '!') *ptr = '|';
4323         }
4324
4325         /* first check to make sure the request is valid. */
4326
4327         err = CtdlDoIHavePermissionToPostInThisRoom(
4328                 errmsg,
4329                 sizeof errmsg,
4330                 NULL,
4331                 POST_LOGGED_IN,
4332                 (!IsEmptyStr(references))               /* is this a reply?  or a top-level post? */
4333                 );
4334         if (err)
4335         {
4336                 cprintf("%d %s\n", err, errmsg);
4337                 return;
4338         }
4339
4340         /* Check some other permission type things. */
4341
4342         if (IsEmptyStr(newusername)) {
4343                 strcpy(newusername, CCC->user.fullname);
4344         }
4345         if (  (CCC->user.axlevel < AxAideU)
4346               && (strcasecmp(newusername, CCC->user.fullname))
4347               && (strcasecmp(newusername, CCC->cs_inet_fn))
4348                 ) {
4349                 cprintf("%d You don't have permission to author messages as '%s'.\n",
4350                         ERROR + HIGHER_ACCESS_REQUIRED,
4351                         newusername
4352                         );
4353                 return;
4354         }
4355
4356
4357         if (IsEmptyStr(newuseremail)) {
4358                 newuseremail_ok = 1;
4359         }
4360
4361         if (!IsEmptyStr(newuseremail)) {
4362                 if (!strcasecmp(newuseremail, CCC->cs_inet_email)) {
4363                         newuseremail_ok = 1;
4364                 }
4365                 else if (!IsEmptyStr(CCC->cs_inet_other_emails)) {
4366                         j = num_tokens(CCC->cs_inet_other_emails, '|');
4367                         for (i=0; i<j; ++i) {
4368                                 extract_token(buf, CCC->cs_inet_other_emails, i, '|', sizeof buf);
4369                                 if (!strcasecmp(newuseremail, buf)) {
4370                                         newuseremail_ok = 1;
4371                                 }
4372                         }
4373                 }
4374         }
4375
4376         if (!newuseremail_ok) {
4377                 cprintf("%d You don't have permission to author messages as '%s'.\n",
4378                         ERROR + HIGHER_ACCESS_REQUIRED,
4379                         newuseremail
4380                         );
4381                 return;
4382         }
4383
4384         CCC->cs_flags |= CS_POSTING;
4385
4386         /* In mailbox rooms we have to behave a little differently --
4387          * make sure the user has specified at least one recipient.  Then
4388          * validate the recipient(s).  We do this for the Mail> room, as
4389          * well as any room which has the "Mailbox" view set - unless it
4390          * is the DRAFTS room which does not require recipients
4391          */
4392
4393         if ( (  ( (CCC->room.QRflags & QR_MAILBOX) && (!strcasecmp(&CCC->room.QRname[11], MAILROOM)) )
4394                 || ( (CCC->room.QRflags & QR_MAILBOX) && (CCC->curr_view == VIEW_MAILBOX) )
4395                      ) && (strcasecmp(&CCC->room.QRname[11], USERDRAFTROOM)) !=0 ) {
4396                 if (CCC->user.axlevel < AxProbU) {
4397                         strcpy(recp, "sysop");
4398                         strcpy(cc, "");
4399                         strcpy(bcc, "");
4400                 }
4401
4402                 valid_to = validate_recipients(recp, NULL, 0);
4403                 if (valid_to->num_error > 0) {
4404                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_to->errormsg);
4405                         free_recipients(valid_to);
4406                         return;
4407                 }
4408
4409                 valid_cc = validate_recipients(cc, NULL, 0);
4410                 if (valid_cc->num_error > 0) {
4411                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_cc->errormsg);
4412                         free_recipients(valid_to);
4413                         free_recipients(valid_cc);
4414                         return;
4415                 }
4416
4417                 valid_bcc = validate_recipients(bcc, NULL, 0);
4418                 if (valid_bcc->num_error > 0) {
4419                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_bcc->errormsg);
4420                         free_recipients(valid_to);
4421                         free_recipients(valid_cc);
4422                         free_recipients(valid_bcc);
4423                         return;
4424                 }
4425
4426                 /* Recipient required, but none were specified */
4427                 if ( (valid_to->num_error < 0) && (valid_cc->num_error < 0) && (valid_bcc->num_error < 0) ) {
4428                         free_recipients(valid_to);
4429                         free_recipients(valid_cc);
4430                         free_recipients(valid_bcc);
4431                         cprintf("%d At least one recipient is required.\n", ERROR + NO_SUCH_USER);
4432                         return;
4433                 }
4434
4435                 if (valid_to->num_internet + valid_cc->num_internet + valid_bcc->num_internet > 0) {
4436                         if (CtdlCheckInternetMailPermission(&CCC->user)==0) {
4437                                 cprintf("%d You do not have permission "
4438                                         "to send Internet mail.\n",
4439                                         ERROR + HIGHER_ACCESS_REQUIRED);
4440                                 free_recipients(valid_to);
4441                                 free_recipients(valid_cc);
4442                                 free_recipients(valid_bcc);
4443                                 return;
4444                         }
4445                 }
4446
4447                 if ( ( (valid_to->num_internet + valid_to->num_ignet + valid_cc->num_internet + valid_cc->num_ignet + valid_bcc->num_internet + valid_bcc->num_ignet) > 0)
4448                      && (CCC->user.axlevel < AxNetU) ) {
4449                         cprintf("%d Higher access required for network mail.\n",
4450                                 ERROR + HIGHER_ACCESS_REQUIRED);
4451                         free_recipients(valid_to);
4452                         free_recipients(valid_cc);
4453                         free_recipients(valid_bcc);
4454                         return;
4455                 }
4456
4457                 if ((RESTRICT_INTERNET == 1)
4458                     && (valid_to->num_internet + valid_cc->num_internet + valid_bcc->num_internet > 0)
4459                     && ((CCC->user.flags & US_INTERNET) == 0)
4460                     && (!CCC->internal_pgm)) {
4461                         cprintf("%d You don't have access to Internet mail.\n",
4462                                 ERROR + HIGHER_ACCESS_REQUIRED);
4463                         free_recipients(valid_to);
4464                         free_recipients(valid_cc);
4465                         free_recipients(valid_bcc);
4466                         return;
4467                 }
4468
4469         }
4470
4471         /* Is this a room which has anonymous-only or anonymous-option? */
4472         anonymous = MES_NORMAL;
4473         if (CCC->room.QRflags & QR_ANONONLY) {
4474                 anonymous = MES_ANONONLY;
4475         }
4476         if (CCC->room.QRflags & QR_ANONOPT) {
4477                 if (anon_flag == 1) {   /* only if the user requested it */
4478                         anonymous = MES_ANONOPT;
4479                 }
4480         }
4481
4482         if ((CCC->room.QRflags & QR_MAILBOX) == 0) {
4483                 recp[0] = 0;
4484         }
4485
4486         /* Recommend to the client that the use of a message subject is
4487          * strongly recommended in this room, if either the SUBJECTREQ flag
4488          * is set, or if there is one or more Internet email recipients.
4489          */
4490         if (CCC->room.QRflags2 & QR2_SUBJECTREQ) subject_required = 1;
4491         if ((valid_to)  && (valid_to->num_internet > 0))        subject_required = 1;
4492         if ((valid_cc)  && (valid_cc->num_internet > 0))        subject_required = 1;
4493         if ((valid_bcc) && (valid_bcc->num_internet > 0))       subject_required = 1;
4494
4495         /* If we're only checking the validity of the request, return
4496          * success without creating the message.
4497          */
4498         if (post == 0) {
4499                 cprintf("%d %s|%d\n", CIT_OK,
4500                         ((valid_to != NULL) ? valid_to->display_recp : ""),
4501                         subject_required);
4502                 free_recipients(valid_to);
4503                 free_recipients(valid_cc);
4504                 free_recipients(valid_bcc);
4505                 return;
4506         }
4507
4508         /* We don't need these anymore because we'll do it differently below */
4509         free_recipients(valid_to);
4510         free_recipients(valid_cc);
4511         free_recipients(valid_bcc);
4512
4513         /* Read in the message from the client. */
4514         if (do_confirm) {
4515                 cprintf("%d send message\n", START_CHAT_MODE);
4516         } else {
4517                 cprintf("%d send message\n", SEND_LISTING);
4518         }
4519
4520         msg = CtdlMakeMessage(&CCC->user, recp, cc,
4521                               CCC->room.QRname, anonymous, format_type,
4522                               newusername, newuseremail, subject,
4523                               ((!IsEmptyStr(supplied_euid)) ? supplied_euid : NULL),
4524                               NULL, references);
4525
4526         /* Put together one big recipients struct containing to/cc/bcc all in
4527          * one.  This is for the envelope.
4528          */
4529         char *all_recps = malloc(SIZ * 3);
4530         strcpy(all_recps, recp);
4531         if (!IsEmptyStr(cc)) {
4532                 if (!IsEmptyStr(all_recps)) {
4533                         strcat(all_recps, ",");
4534                 }
4535                 strcat(all_recps, cc);
4536         }
4537         if (!IsEmptyStr(bcc)) {
4538                 if (!IsEmptyStr(all_recps)) {
4539                         strcat(all_recps, ",");
4540                 }
4541                 strcat(all_recps, bcc);
4542         }
4543         if (!IsEmptyStr(all_recps)) {
4544                 valid = validate_recipients(all_recps, NULL, 0);
4545         }
4546         else {
4547                 valid = NULL;
4548         }
4549         free(all_recps);
4550
4551         if (msg != NULL) {
4552                 msgnum = CtdlSubmitMsg(msg, valid, "", QP_EADDR);
4553                 if (verbose_reply)
4554                 {
4555                         if (StrLength(CCC->StatusMessage)>0)
4556                         {
4557                                 StrBufAppendBufPlain(CCC->StatusMessage, HKEY("\n000\n"), 0);
4558                                 cputbuf(CCC->StatusMessage);
4559                         }
4560                         else
4561                                 client_write(HKEY("\n000\n"));
4562                 }
4563
4564                 if (do_confirm) {
4565                         cprintf("%ld\n", msgnum);
4566                         if (msgnum >= 0L) {
4567                                 client_write(HKEY("Message accepted.\n"));
4568                         }
4569                         else {
4570                                 client_write(HKEY("Internal error.\n"));
4571                         }
4572                         if (msg->cm_fields['E'] != NULL) {
4573                                 cprintf("%s\n", msg->cm_fields['E']);
4574                         } else {
4575                                 cprintf("\n");
4576                         }
4577                         cprintf("000\n");
4578                 }
4579
4580                 CtdlFreeMessage(msg);
4581         }
4582         if (valid != NULL) {
4583                 free_recipients(valid);
4584         }
4585         return;
4586 }
4587
4588
4589
4590 /*
4591  * API function to delete messages which match a set of criteria
4592  * (returns the actual number of messages deleted)
4593  */
4594 int CtdlDeleteMessages(char *room_name,         /* which room */
4595                        long *dmsgnums,          /* array of msg numbers to be deleted */
4596                        int num_dmsgnums,        /* number of msgs to be deleted, or 0 for "any" */
4597                        char *content_type       /* or "" for any.  regular expressions expected. */
4598         )
4599 {
4600         struct ctdlroom qrbuf;
4601         struct cdbdata *cdbfr;
4602         long *msglist = NULL;
4603         long *dellist = NULL;
4604         int num_msgs = 0;
4605         int i, j;
4606         int num_deleted = 0;
4607         int delete_this;
4608         struct MetaData smi;
4609         regex_t re;
4610         regmatch_t pm;
4611         int need_to_free_re = 0;
4612
4613         if (content_type) if (!IsEmptyStr(content_type)) {
4614                         regcomp(&re, content_type, 0);
4615                         need_to_free_re = 1;
4616                 }
4617         syslog(LOG_DEBUG, "CtdlDeleteMessages(%s, %d msgs, %s)\n",
4618                room_name, num_dmsgnums, content_type);
4619
4620         /* get room record, obtaining a lock... */
4621         if (CtdlGetRoomLock(&qrbuf, room_name) != 0) {
4622                 syslog(LOG_ERR, "CtdlDeleteMessages(): Room <%s> not found\n",
4623                        room_name);
4624                 if (need_to_free_re) regfree(&re);
4625                 return (0);     /* room not found */
4626         }
4627         cdbfr = cdb_fetch(CDB_MSGLISTS, &qrbuf.QRnumber, sizeof(long));
4628
4629         if (cdbfr != NULL) {
4630                 dellist = malloc(cdbfr->len);
4631                 msglist = (long *) cdbfr->ptr;
4632                 cdbfr->ptr = NULL;      /* CtdlDeleteMessages() now owns this memory */
4633                 num_msgs = cdbfr->len / sizeof(long);
4634                 cdb_free(cdbfr);
4635         }
4636         if (num_msgs > 0) {
4637                 for (i = 0; i < num_msgs; ++i) {
4638                         delete_this = 0x00;
4639
4640                         /* Set/clear a bit for each criterion */
4641
4642                         /* 0 messages in the list or a null list means that we are
4643                          * interested in deleting any messages which meet the other criteria.
4644                          */
4645                         if ((num_dmsgnums == 0) || (dmsgnums == NULL)) {
4646                                 delete_this |= 0x01;
4647                         }
4648                         else {
4649                                 for (j=0; j<num_dmsgnums; ++j) {
4650                                         if (msglist[i] == dmsgnums[j]) {
4651                                                 delete_this |= 0x01;
4652                                         }
4653                                 }
4654                         }
4655
4656                         if (IsEmptyStr(content_type)) {
4657                                 delete_this |= 0x02;
4658                         } else {
4659                                 GetMetaData(&smi, msglist[i]);
4660                                 if (regexec(&re, smi.meta_content_type, 1, &pm, 0) == 0) {
4661                                         delete_this |= 0x02;
4662                                 }
4663                         }
4664
4665                         /* Delete message only if all bits are set */
4666                         if (delete_this == 0x03) {
4667                                 dellist[num_deleted++] = msglist[i];
4668                                 msglist[i] = 0L;
4669                         }
4670                 }
4671
4672                 num_msgs = sort_msglist(msglist, num_msgs);
4673                 cdb_store(CDB_MSGLISTS, &qrbuf.QRnumber, (int)sizeof(long),
4674                           msglist, (int)(num_msgs * sizeof(long)));
4675
4676                 if (num_msgs > 0)
4677                         qrbuf.QRhighest = msglist[num_msgs - 1];
4678                 else
4679                         qrbuf.QRhighest = 0;
4680         }
4681         CtdlPutRoomLock(&qrbuf);
4682
4683         /* Go through the messages we pulled out of the index, and decrement
4684          * their reference counts by 1.  If this is the only room the message
4685          * was in, the reference count will reach zero and the message will
4686          * automatically be deleted from the database.  We do this in a
4687          * separate pass because there might be plug-in hooks getting called,
4688          * and we don't want that happening during an S_ROOMS critical
4689          * section.
4690          */
4691         if (num_deleted) for (i=0; i<num_deleted; ++i) {
4692                         PerformDeleteHooks(qrbuf.QRname, dellist[i]);
4693                         AdjRefCount(dellist[i], -1);
4694                 }
4695
4696         /* Now free the memory we used, and go away. */
4697         if (msglist != NULL) free(msglist);
4698         if (dellist != NULL) free(dellist);
4699         syslog(LOG_DEBUG, "%d message(s) deleted.\n", num_deleted);
4700         if (need_to_free_re) regfree(&re);
4701         return (num_deleted);
4702 }
4703
4704
4705
4706 /*
4707  * Check whether the current user has permission to delete messages from
4708  * the current room (returns 1 for yes, 0 for no)
4709  */
4710 int CtdlDoIHavePermissionToDeleteMessagesFromThisRoom(void) {
4711         int ra;
4712         CtdlRoomAccess(&CC->room, &CC->user, &ra, NULL);
4713         if (ra & UA_DELETEALLOWED) return(1);
4714         return(0);
4715 }
4716
4717
4718
4719
4720 /*
4721  * Delete message from current room
4722  */
4723 void cmd_dele(char *args)
4724 {
4725         int num_deleted;
4726         int i;
4727         char msgset[SIZ];
4728         char msgtok[32];
4729         long *msgs;
4730         int num_msgs = 0;
4731
4732         extract_token(msgset, args, 0, '|', sizeof msgset);
4733         num_msgs = num_tokens(msgset, ',');
4734         if (num_msgs < 1) {
4735                 cprintf("%d Nothing to do.\n", CIT_OK);
4736                 return;
4737         }
4738
4739         if (CtdlDoIHavePermissionToDeleteMessagesFromThisRoom() == 0) {
4740                 cprintf("%d Higher access required.\n",
4741                         ERROR + HIGHER_ACCESS_REQUIRED);
4742                 return;
4743         }
4744
4745         /*
4746          * Build our message set to be moved/copied
4747          */
4748         msgs = malloc(num_msgs * sizeof(long));
4749         for (i=0; i<num_msgs; ++i) {
4750                 extract_token(msgtok, msgset, i, ',', sizeof msgtok);
4751                 msgs[i] = atol(msgtok);
4752         }
4753
4754         num_deleted = CtdlDeleteMessages(CC->room.QRname, msgs, num_msgs, "");
4755         free(msgs);
4756
4757         if (num_deleted) {
4758                 cprintf("%d %d message%s deleted.\n", CIT_OK,
4759                         num_deleted, ((num_deleted != 1) ? "s" : ""));
4760         } else {
4761                 cprintf("%d Message not found.\n", ERROR + MESSAGE_NOT_FOUND);
4762         }
4763 }
4764
4765
4766
4767
4768 /*
4769  * move or copy a message to another room
4770  */
4771 void cmd_move(char *args)
4772 {
4773         char msgset[SIZ];
4774         char msgtok[32];
4775         long *msgs;
4776         int num_msgs = 0;
4777
4778         char targ[ROOMNAMELEN];
4779         struct ctdlroom qtemp;
4780         int err;
4781         int is_copy = 0;
4782         int ra;
4783         int permit = 0;
4784         int i;
4785
4786         extract_token(msgset, args, 0, '|', sizeof msgset);
4787         num_msgs = num_tokens(msgset, ',');
4788         if (num_msgs < 1) {
4789                 cprintf("%d Nothing to do.\n", CIT_OK);
4790                 return;
4791         }
4792
4793         extract_token(targ, args, 1, '|', sizeof targ);
4794         convert_room_name_macros(targ, sizeof targ);
4795         targ[ROOMNAMELEN - 1] = 0;
4796         is_copy = extract_int(args, 2);
4797
4798         if (CtdlGetRoom(&qtemp, targ) != 0) {
4799                 cprintf("%d '%s' does not exist.\n", ERROR + ROOM_NOT_FOUND, targ);
4800                 return;
4801         }
4802
4803         if (!strcasecmp(qtemp.QRname, CC->room.QRname)) {
4804                 cprintf("%d Source and target rooms are the same.\n", ERROR + ALREADY_EXISTS);
4805                 return;
4806         }
4807
4808         CtdlGetUser(&CC->user, CC->curr_user);
4809         CtdlRoomAccess(&qtemp, &CC->user, &ra, NULL);
4810
4811         /* Check for permission to perform this operation.
4812          * Remember: "CC->room" is source, "qtemp" is target.
4813          */
4814         permit = 0;
4815
4816         /* Aides can move/copy */
4817         if (CC->user.axlevel >= AxAideU) permit = 1;
4818
4819         /* Room aides can move/copy */
4820         if (CC->user.usernum == CC->room.QRroomaide) permit = 1;
4821
4822         /* Permit move/copy from personal rooms */
4823         if ((CC->room.QRflags & QR_MAILBOX)
4824             && (qtemp.QRflags & QR_MAILBOX)) permit = 1;
4825
4826         /* Permit only copy from public to personal room */
4827         if ( (is_copy)
4828              && (!(CC->room.QRflags & QR_MAILBOX))
4829              && (qtemp.QRflags & QR_MAILBOX)) permit = 1;
4830
4831         /* Permit message removal from collaborative delete rooms */
4832         if (CC->room.QRflags2 & QR2_COLLABDEL) permit = 1;
4833
4834         /* Users allowed to post into the target room may move into it too. */
4835         if ((CC->room.QRflags & QR_MAILBOX) &&
4836             (qtemp.QRflags & UA_POSTALLOWED))  permit = 1;
4837
4838         /* User must have access to target room */
4839         if (!(ra & UA_KNOWN))  permit = 0;
4840
4841         if (!permit) {
4842                 cprintf("%d Higher access required.\n",
4843                         ERROR + HIGHER_ACCESS_REQUIRED);
4844                 return;
4845         }
4846
4847         /*
4848          * Build our message set to be moved/copied
4849          */
4850         msgs = malloc(num_msgs * sizeof(long));
4851         for (i=0; i<num_msgs; ++i) {
4852                 extract_token(msgtok, msgset, i, ',', sizeof msgtok);
4853                 msgs[i] = atol(msgtok);
4854         }
4855
4856         /*
4857          * Do the copy
4858          */
4859         err = CtdlSaveMsgPointersInRoom(targ, msgs, num_msgs, 1, NULL, 0);
4860         if (err != 0) {
4861                 cprintf("%d Cannot store message(s) in %s: error %d\n",
4862                         err, targ, err);
4863                 free(msgs);
4864                 return;
4865         }
4866
4867         /* Now delete the message from the source room,
4868          * if this is a 'move' rather than a 'copy' operation.
4869          */
4870         if (is_copy == 0) {
4871                 CtdlDeleteMessages(CC->room.QRname, msgs, num_msgs, "");
4872         }
4873         free(msgs);
4874
4875         cprintf("%d Message(s) %s.\n", CIT_OK, (is_copy ? "copied" : "moved") );
4876 }
4877
4878
4879
4880 /*
4881  * GetMetaData()  -  Get the supplementary record for a message
4882  */
4883 void GetMetaData(struct MetaData *smibuf, long msgnum)
4884 {
4885
4886         struct cdbdata *cdbsmi;
4887         long TheIndex;
4888
4889         memset(smibuf, 0, sizeof(struct MetaData));
4890         smibuf->meta_msgnum = msgnum;
4891         smibuf->meta_refcount = 1;      /* Default reference count is 1 */
4892
4893         /* Use the negative of the message number for its supp record index */
4894         TheIndex = (0L - msgnum);
4895
4896         cdbsmi = cdb_fetch(CDB_MSGMAIN, &TheIndex, sizeof(long));
4897         if (cdbsmi == NULL) {
4898                 return;         /* record not found; go with defaults */
4899         }
4900         memcpy(smibuf, cdbsmi->ptr,
4901                ((cdbsmi->len > sizeof(struct MetaData)) ?
4902                 sizeof(struct MetaData) : cdbsmi->len));
4903         cdb_free(cdbsmi);
4904         return;
4905 }
4906
4907
4908 /*
4909  * PutMetaData()  -  (re)write supplementary record for a message
4910  */
4911 void PutMetaData(struct MetaData *smibuf)
4912 {
4913         long TheIndex;
4914
4915         /* Use the negative of the message number for the metadata db index */
4916         TheIndex = (0L - smibuf->meta_msgnum);
4917
4918         cdb_store(CDB_MSGMAIN,
4919                   &TheIndex, (int)sizeof(long),
4920                   smibuf, (int)sizeof(struct MetaData));
4921
4922 }
4923
4924 /*
4925  * AdjRefCount  -  submit an adjustment to the reference count for a message.
4926  *                 (These are just queued -- we actually process them later.)
4927  */
4928 void AdjRefCount(long msgnum, int incr)
4929 {
4930         struct arcq new_arcq;
4931         int rv = 0;
4932
4933         syslog(LOG_DEBUG, "AdjRefCount() msg %ld ref count delta %+d\n", msgnum, incr);
4934
4935         begin_critical_section(S_SUPPMSGMAIN);
4936         if (arcfp == NULL) {
4937                 arcfp = fopen(file_arcq, "ab+");
4938                 chown(file_arcq, CTDLUID, (-1));
4939                 chmod(file_arcq, 0600);
4940         }
4941         end_critical_section(S_SUPPMSGMAIN);
4942
4943         /* msgnum < 0 means that we're trying to close the file */
4944         if (msgnum < 0) {
4945                 syslog(LOG_DEBUG, "Closing the AdjRefCount queue file\n");
4946                 begin_critical_section(S_SUPPMSGMAIN);
4947                 if (arcfp != NULL) {
4948                         fclose(arcfp);
4949                         arcfp = NULL;
4950                 }
4951                 end_critical_section(S_SUPPMSGMAIN);
4952                 return;
4953         }
4954
4955         /*
4956          * If we can't open the queue, perform the operation synchronously.
4957          */
4958         if (arcfp == NULL) {
4959                 TDAP_AdjRefCount(msgnum, incr);
4960                 return;
4961         }
4962
4963         new_arcq.arcq_msgnum = msgnum;
4964         new_arcq.arcq_delta = incr;
4965         rv = fwrite(&new_arcq, sizeof(struct arcq), 1, arcfp);
4966         if (rv == -1) {
4967                 syslog(LOG_EMERG, "Couldn't write Refcount Queue File %s: %s\n",
4968                        file_arcq,
4969                        strerror(errno));
4970         }
4971         fflush(arcfp);
4972
4973         return;
4974 }
4975
4976
4977 /*
4978  * TDAP_ProcessAdjRefCountQueue()
4979  *
4980  * Process the queue of message count adjustments that was created by calls
4981  * to AdjRefCount() ... by reading the queue and calling TDAP_AdjRefCount()
4982  * for each one.  This should be an "off hours" operation.
4983  */
4984 int TDAP_ProcessAdjRefCountQueue(void)
4985 {
4986         char file_arcq_temp[PATH_MAX];
4987         int r;
4988         FILE *fp;
4989         struct arcq arcq_rec;
4990         int num_records_processed = 0;
4991
4992         snprintf(file_arcq_temp, sizeof file_arcq_temp, "%s.%04x", file_arcq, rand());
4993
4994         begin_critical_section(S_SUPPMSGMAIN);
4995         if (arcfp != NULL) {
4996                 fclose(arcfp);
4997                 arcfp = NULL;
4998         }
4999
5000         r = link(file_arcq, file_arcq_temp);
5001         if (r != 0) {
5002                 syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5003                 end_critical_section(S_SUPPMSGMAIN);
5004                 return(num_records_processed);
5005         }
5006
5007         unlink(file_arcq);
5008         end_critical_section(S_SUPPMSGMAIN);
5009
5010         fp = fopen(file_arcq_temp, "rb");
5011         if (fp == NULL) {
5012                 syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5013                 return(num_records_processed);
5014         }
5015
5016         while (fread(&arcq_rec, sizeof(struct arcq), 1, fp) == 1) {
5017                 TDAP_AdjRefCount(arcq_rec.arcq_msgnum, arcq_rec.arcq_delta);
5018                 ++num_records_processed;
5019         }
5020
5021         fclose(fp);
5022         r = unlink(file_arcq_temp);
5023         if (r != 0) {
5024                 syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5025         }
5026
5027         return(num_records_processed);
5028 }
5029
5030
5031
5032 /*
5033  * TDAP_AdjRefCount  -  adjust the reference count for a message.
5034  *                      This one does it "for real" because it's called by
5035  *                      the autopurger function that processes the queue
5036  *                      created by AdjRefCount().   If a message's reference
5037  *                      count becomes zero, we also delete the message from
5038  *                      disk and de-index it.
5039  */
5040 void TDAP_AdjRefCount(long msgnum, int incr)
5041 {
5042
5043         struct MetaData smi;
5044         long delnum;
5045
5046         /* This is a *tight* critical section; please keep it that way, as
5047          * it may get called while nested in other critical sections.
5048          * Complicating this any further will surely cause deadlock!
5049          */
5050         begin_critical_section(S_SUPPMSGMAIN);
5051         GetMetaData(&smi, msgnum);
5052         smi.meta_refcount += incr;
5053         PutMetaData(&smi);
5054         end_critical_section(S_SUPPMSGMAIN);
5055         syslog(LOG_DEBUG, "TDAP_AdjRefCount() msg %ld ref count delta %+d, is now %d\n",
5056                msgnum, incr, smi.meta_refcount
5057                 );
5058
5059         /* If the reference count is now zero, delete the message
5060          * (and its supplementary record as well).
5061          */
5062         if (smi.meta_refcount == 0) {
5063                 syslog(LOG_DEBUG, "Deleting message <%ld>\n", msgnum);
5064
5065                 /* Call delete hooks with NULL room to show it has gone altogether */
5066                 PerformDeleteHooks(NULL, msgnum);
5067
5068                 /* Remove from message base */
5069                 delnum = msgnum;
5070                 cdb_delete(CDB_MSGMAIN, &delnum, (int)sizeof(long));
5071                 cdb_delete(CDB_BIGMSGS, &delnum, (int)sizeof(long));
5072
5073                 /* Remove metadata record */
5074                 delnum = (0L - msgnum);
5075                 cdb_delete(CDB_MSGMAIN, &delnum, (int)sizeof(long));
5076         }
5077
5078 }
5079
5080 /*
5081  * Write a generic object to this room
5082  *
5083  * Note: this could be much more efficient.  Right now we use two temporary
5084  * files, and still pull the message into memory as with all others.
5085  */
5086 void CtdlWriteObject(char *req_room,                    /* Room to stuff it in */
5087                      char *content_type,                /* MIME type of this object */
5088                      char *raw_message,         /* Data to be written */
5089                      off_t raw_length,          /* Size of raw_message */
5090                      struct ctdluser *is_mailbox,       /* Mailbox room? */
5091                      int is_binary,                     /* Is encoding necessary? */
5092                      int is_unique,                     /* Del others of this type? */
5093                      unsigned int flags         /* Internal save flags */
5094         )
5095 {
5096
5097         struct ctdlroom qrbuf;
5098         char roomname[ROOMNAMELEN];
5099         struct CtdlMessage *msg;
5100         char *encoded_message = NULL;
5101
5102         if (is_mailbox != NULL) {
5103                 CtdlMailboxName(roomname, sizeof roomname, is_mailbox, req_room);
5104         }
5105         else {
5106                 safestrncpy(roomname, req_room, sizeof(roomname));
5107         }
5108
5109         syslog(LOG_DEBUG, "Raw length is %ld\n", (long)raw_length);
5110
5111         if (is_binary) {
5112                 encoded_message = malloc((size_t) (((raw_length * 134) / 100) + 4096 ) );
5113         }
5114         else {
5115                 encoded_message = malloc((size_t)(raw_length + 4096));
5116         }
5117
5118         sprintf(encoded_message, "Content-type: %s\n", content_type);
5119
5120         if (is_binary) {
5121                 sprintf(&encoded_message[strlen(encoded_message)],
5122                         "Content-transfer-encoding: base64\n\n"
5123                         );
5124         }
5125         else {
5126                 sprintf(&encoded_message[strlen(encoded_message)],
5127                         "Content-transfer-encoding: 7bit\n\n"
5128                         );
5129         }
5130
5131         if (is_binary) {
5132                 CtdlEncodeBase64(
5133                         &encoded_message[strlen(encoded_message)],
5134                         raw_message,
5135                         (int)raw_length,
5136                         0
5137                         );
5138         }
5139         else {
5140                 memcpy(
5141                         &encoded_message[strlen(encoded_message)],
5142                         raw_message,
5143                         (int)(raw_length+1)
5144                         );
5145         }
5146
5147         syslog(LOG_DEBUG, "Allocating\n");
5148         msg = malloc(sizeof(struct CtdlMessage));
5149         memset(msg, 0, sizeof(struct CtdlMessage));
5150         msg->cm_magic = CTDLMESSAGE_MAGIC;
5151         msg->cm_anon_type = MES_NORMAL;
5152         msg->cm_format_type = 4;
5153         msg->cm_fields['A'] = strdup(CC->user.fullname);
5154         msg->cm_fields['O'] = strdup(req_room);
5155         msg->cm_fields['N'] = strdup(config.c_nodename);
5156         msg->cm_fields['H'] = strdup(config.c_humannode);
5157         msg->cm_flags = flags;
5158
5159         msg->cm_fields['M'] = encoded_message;
5160
5161         /* Create the requested room if we have to. */
5162         if (CtdlGetRoom(&qrbuf, roomname) != 0) {
5163                 CtdlCreateRoom(roomname,
5164                                ( (is_mailbox != NULL) ? 5 : 3 ),
5165                                "", 0, 1, 0, VIEW_BBS);
5166         }
5167         /* If the caller specified this object as unique, delete all
5168          * other objects of this type that are currently in the room.
5169          */
5170         if (is_unique) {
5171                 syslog(LOG_DEBUG, "Deleted %d other msgs of this type\n",
5172                        CtdlDeleteMessages(roomname, NULL, 0, content_type)
5173                         );
5174         }
5175         /* Now write the data */
5176         CtdlSubmitMsg(msg, NULL, roomname, 0);
5177         CtdlFreeMessage(msg);
5178 }
5179
5180
5181
5182
5183
5184
5185 void CtdlGetSysConfigBackend(long msgnum, void *userdata) {
5186         config_msgnum = msgnum;
5187 }
5188
5189
5190 char *CtdlGetSysConfig(char *sysconfname) {
5191         char hold_rm[ROOMNAMELEN];
5192         long msgnum;
5193         char *conf;
5194         struct CtdlMessage *msg;
5195         char buf[SIZ];
5196
5197         strcpy(hold_rm, CC->room.QRname);
5198         if (CtdlGetRoom(&CC->room, SYSCONFIGROOM) != 0) {
5199                 CtdlGetRoom(&CC->room, hold_rm);
5200                 return NULL;
5201         }
5202
5203
5204         /* We want the last (and probably only) config in this room */
5205         begin_critical_section(S_CONFIG);
5206         config_msgnum = (-1L);
5207         CtdlForEachMessage(MSGS_LAST, 1, NULL, sysconfname, NULL,
5208                            CtdlGetSysConfigBackend, NULL);
5209         msgnum = config_msgnum;
5210         end_critical_section(S_CONFIG);
5211
5212         if (msgnum < 0L) {
5213                 conf = NULL;
5214         }
5215         else {
5216                 msg = CtdlFetchMessage(msgnum, 1);
5217                 if (msg != NULL) {
5218                         conf = strdup(msg->cm_fields['M']);
5219                         CtdlFreeMessage(msg);
5220                 }
5221                 else {
5222                         conf = NULL;
5223                 }
5224         }
5225
5226         CtdlGetRoom(&CC->room, hold_rm);
5227
5228         if (conf != NULL) do {
5229                         extract_token(buf, conf, 0, '\n', sizeof buf);
5230                         strcpy(conf, &conf[strlen(buf)+1]);
5231                 } while ( (!IsEmptyStr(conf)) && (!IsEmptyStr(buf)) );
5232
5233         return(conf);
5234 }
5235
5236
5237 void CtdlPutSysConfig(char *sysconfname, char *sysconfdata) {
5238         CtdlWriteObject(SYSCONFIGROOM, sysconfname, sysconfdata, (strlen(sysconfdata)+1), NULL, 0, 1, 0);
5239 }
5240
5241
5242 /*
5243  * Determine whether a given Internet address belongs to the current user
5244  */
5245 int CtdlIsMe(char *addr, int addr_buf_len)
5246 {
5247         struct recptypes *recp;
5248         int i;
5249
5250         recp = validate_recipients(addr, NULL, 0);
5251         if (recp == NULL) return(0);
5252
5253         if (recp->num_local == 0) {
5254                 free_recipients(recp);
5255                 return(0);
5256         }
5257
5258         for (i=0; i<recp->num_local; ++i) {
5259                 extract_token(addr, recp->recp_local, i, '|', addr_buf_len);
5260                 if (!strcasecmp(addr, CC->user.fullname)) {
5261                         free_recipients(recp);
5262                         return(1);
5263                 }
5264         }
5265
5266         free_recipients(recp);
5267         return(0);
5268 }
5269
5270
5271 /*
5272  * Citadel protocol command to do the same
5273  */
5274 void cmd_isme(char *argbuf) {
5275         char addr[256];
5276
5277         if (CtdlAccessCheck(ac_logged_in)) return;
5278         extract_token(addr, argbuf, 0, '|', sizeof addr);
5279
5280         if (CtdlIsMe(addr, sizeof addr)) {
5281                 cprintf("%d %s\n", CIT_OK, addr);
5282         }
5283         else {
5284                 cprintf("%d Not you.\n", ERROR + ILLEGAL_VALUE);
5285         }
5286
5287 }
5288
5289
5290 /*****************************************************************************/
5291 /*                      MODULE INITIALIZATION STUFF                          */
5292 /*****************************************************************************/
5293
5294 CTDL_MODULE_INIT(msgbase)
5295 {
5296         if (!threading) {
5297                 CtdlRegisterProtoHook(cmd_msgs, "MSGS", "Output a list of messages in the current room");
5298                 CtdlRegisterProtoHook(cmd_msg0, "MSG0", "Output a message in plain text format");
5299                 CtdlRegisterProtoHook(cmd_msg2, "MSG2", "Output a message in RFC822 format");
5300                 CtdlRegisterProtoHook(cmd_msg3, "MSG3", "Output a message in raw format (deprecated)");
5301                 CtdlRegisterProtoHook(cmd_msg4, "MSG4", "Output a message in the client's preferred format");
5302                 CtdlRegisterProtoHook(cmd_msgp, "MSGP", "Select preferred format for MSG4 output");
5303                 CtdlRegisterProtoHook(cmd_opna, "OPNA", "Open an attachment for download");
5304                 CtdlRegisterProtoHook(cmd_dlat, "DLAT", "Download an attachment");
5305                 CtdlRegisterProtoHook(cmd_ent0, "ENT0", "Enter a message");
5306                 CtdlRegisterProtoHook(cmd_dele, "DELE", "Delete a message");
5307                 CtdlRegisterProtoHook(cmd_move, "MOVE", "Move or copy a message to another room");
5308                 CtdlRegisterProtoHook(cmd_isme, "ISME", "Determine whether an email address belongs to a user");
5309         }
5310
5311         /* return our Subversion id for the Log */
5312         return "msgbase";
5313 }